Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,198 total · sorted newest first- Sep 17, 2026
Malicious code in kiki-kue97-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lapis53-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue77-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue94-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lapis53-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kupat25-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kupang24-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue8-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lapis52-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue83-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue89-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kupat29-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lapis59-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lapis49-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lapis61-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-lapis22-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kupat85-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue47-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue33-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue74-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-klipo40-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue23-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue10-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue100-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-klentik87-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-klipo93-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kripik69-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kripik93-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kolak11-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue65-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue64-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-klentik9-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue7-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kolak28-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-klanting74-apidev (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-klanting85-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue51-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue11-tititugel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue14-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kolak100-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue41-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-klentik30-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kolak25-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-klanting58-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-klentik46-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue4-pore (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-klipo5-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-klipo92-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue24-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue36-sluey (npm)
1 compromised version
Page 258 of 7,324