Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,180 total · sorted newest first- Sep 17, 2026
Malicious code in kiki-rangi11-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-ragi13-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-poke24 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rangginang34-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-poke23 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rawon60-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-ragi86-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rangi83-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-poke22 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-poke7 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rangi47-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-ronde34-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-ragi11-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-poke3 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-ronde3-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-poke25 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-ronde38-apidev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-poke5 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rangi79-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rujak2-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-poke20 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rangginang36-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-poke21 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rangginang27-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rangi6-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-poke4 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rawon70-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rawon75-pore (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rujak13-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rawon81-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rawon76-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-poke2 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rangi63-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rojak5-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-ronde83-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-rendang11-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-poke8 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-peyek76-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-oncom14-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-peyek20-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-poke1 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-papeda28-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-otak-otak15-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-poke14 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-poke16 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-otak-otak9-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-pisang53-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-poke15 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-poke12 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-oncom48-miaww (npm)
1 compromised version
Page 253 of 7,324