Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,198 total · sorted newest first- Sep 17, 2026
Malicious code in kiki-nasicampur9-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mieayam5-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-miemee88-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-nasicampur96-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-moci90-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-miebogor27-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-moci32-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mieaceh97-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-nasicampur7-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-nasicampur5-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mieayam43-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mie24-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-menjes14-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-martabak63-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mie97-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-martabak74-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mangut99-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mie88-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mendut70-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-martabak29-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mendoan89-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-martabak53-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mendoan10-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-menjes15-wekto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-menjes61-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-martabak43-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mie77-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mendoan98-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mendoan69-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-menjes65-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-martabak40-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mie84-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-martabak52-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mangga43-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lutis83-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lupis64-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mangga14-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mangut87-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lengko9-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mangut13-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lapis75-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mangga40-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mangut89-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mangut22-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lapis88-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lontong43-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mangut2-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lupis70-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lodeh51-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mangut20-breki (npm)
1 compromised version
Page 256 of 7,324