Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,180 total · sorted newest first- Sep 17, 2026
Malicious code in kilo-charlie-gdwh (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-ubi51-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tumis46-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tiwul90-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-toge11-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tiwul18-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kilo-charlie-vanilla-knnrn (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tapai82-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-telur98-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-teh43-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tempe87-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tempe72-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tapai9-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tapai20-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tapai54-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-teh94-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-telur47-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-telurtahu37-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-telur42-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tempe12-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-telur35-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-telurtahu65-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-teh68-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tempe11-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-telurtahu55-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tek53-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tempe54-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tek30-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-telurtahu70-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tek91-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tapai78-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-telur18-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-teh83-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tek66-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tempe30-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tapai49-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-teh73-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-telurtahu31-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-telur43-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-telur64-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-telurtahu94-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-telurtahu32-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-telurtahu45-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tempe72-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tek28-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-takokak6-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tahu49-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tahu55-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tahu36-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tahutek39-sukiwir (npm)
1 compromised version
Page 250 of 7,324