Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,180 total · sorted newest first- Sep 17, 2026
Malicious code in kiki-tahu75-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tahu37-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-takokak80-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tahutek27-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tahu15-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tahu54-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tahu29-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tahutek42-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tahutek62-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tahutek34-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tahu69-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tahutek43-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-taiwan36-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-takokak89-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tahu25-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-soto19-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-serimuka61-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-semur83-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-semur10-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-serabi53-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-semur8-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sego3-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sego89-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sego51-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sego79-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-serimuka23-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-soto74-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-semur51-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-semur80-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sroto41-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-serabi8-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-semur61-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-semur78-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sroto99-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-serabi2-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-soto66-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-soto58-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-semur97-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-serimuka22-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sego90-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-serimuka76-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-serimuka63-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-semur49-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sego48-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sego71-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-soto18-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-serabi96-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-serabi58-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-soto60-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-tahu100-kyuki (npm)
1 compromised version
Page 251 of 7,324