Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,198 total · sorted newest first- Sep 17, 2026
Malicious code in kiki-lutis42-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-liwet62-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lupis40-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mangut39-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lumpur59-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lutis54-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mangut51-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lapis78-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mangut90-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mangga79-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lutis18-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mangut49-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lumpur27-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lepet69-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-martabak14-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mangut26-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mangut41-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mangut7-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lupis56-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lontong33-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mangut42-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lutis75-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lapis75-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mangga66-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lutis6-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lengko27-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lapis83-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mangut9-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lengko10-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-liwet13-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lupis3-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-liwet64-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lupis9-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lengko58-pore (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lepet25-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lontong50-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lutis63-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-mangga4-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lodeh81-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lapis53-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue86-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lapis63-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue84-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kupang50-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lapis31-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue86-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lapis20-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kupang8-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue91-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue9-riris (npm)
1 compromised version
Page 257 of 7,324