Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,180 total · sorted newest first- Sep 17, 2026
Malicious code in kilo-n3g-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-kiwi-kqtn (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-k0f-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-papa-vanilla-fcghz (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-jzf-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-iw6-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-november-banana-ykktm (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-orbit-0a1b (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-dez-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-india-grape-ungnb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-november-mango-zyghn (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-g0h-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-lemon-kiwi-ipkpx (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-opp-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-nectarine-aatr (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-wajit16-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in killllock (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-2d8-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tomat91-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-date-tahm (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tomat22-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-5ca-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-87k-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-toge47-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-79y-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tongseng52-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kikimbappe (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tongseng66-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-621-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-apple-pmcv (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-wajit30-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kikiru (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tiwul48-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tomat49-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-ubi87-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in killrido (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tumis46-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tongseng2-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tumis86-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tongseng35-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-bravo-uniform-ypfwo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-e96-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-toge40-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-193-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tumis17-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tomat12-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tongseng48-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tiwul63-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-5h9-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tongseng58-sluey (npm)
1 compromised version
Page 249 of 7,324