Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,180 total · sorted newest first- Sep 17, 2026
Malicious code in kiki-oncom46-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-pecel72-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-ongol-ongol61-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-otak-otak61-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-poke10 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-poke13 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-peyek17-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-poke17 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-ongol-ongol23-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-pisang8-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-pisang37-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-poke11 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-pisang93-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-peyek25-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-papeda48-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-ongol-ongol98-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-poke19 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-otak-otak18-apidev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-poke18 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-peyek96-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-papeda95-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-peyek72-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-pisang7-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-ongol-ongol89-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-peyek77-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-nasisayur66-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-nasisayur37-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-nasiuduk81-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-oblok80-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-nasiuduk77-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-nasiuduk80-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-oblok45-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-nasipecel94-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-nasipecel49-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-nasisayur55-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-nasiuduk77-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-oblok43-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-oblok49-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-oblok68-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-oblok35-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-nasipecel57-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-nasisayur19-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-nasisayur26-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-nasisayur91-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-miemee88-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-nasipecel28-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-nasipecel49-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-naget36-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-nasi21-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-moci68-tititugel (npm)
1 compromised version
Page 254 of 7,324