Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,180 total · sorted newest first- Sep 17, 2026
Malicious code in kiki-soto52-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-semur99-sumpek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-semur50-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-serabi90-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-soto69-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sambel16-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rujak66-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sate38-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-ruwet5-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-saguer47-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-ruwet98-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sambel44-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-saguer24-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sate60-apidev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rujaksoto93-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rujak79-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sate24-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sambel72-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sasag12-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sambel82-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sasag81-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sate51-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rujak49-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sambel4-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rujaksoto38-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sambel56-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sambel16-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sambel46-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rujaksoto66-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sambel60-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sate76-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sate33-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rujaksoto35-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sate47-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sambel68-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sate36-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-ruwet85-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sasag6-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rujaksoto83-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-sambel18-sumpek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rangi11-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rojak23-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rendang97-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-poke9 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rawon17-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rujak48-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-poke6 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rangi14-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rendang14-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rangi94-sluey (npm)
1 compromised version
Page 252 of 7,324