Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,198 total · sorted newest first- Sep 17, 2026
Malicious code in kiki-kue18-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kolak17-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-klentik74-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue20-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue10-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kripik56-sumpek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue64-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue13-devapp (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue50-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kripik56-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kue73-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-keripik9-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-ketan89-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-klanting55-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-ketoprak45-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-ketoprak93-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-keripik87-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-ketan73-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-keripik98-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-ketan25-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-ketoprak11-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-keripik81-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-klanting47-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-keripik51-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-jus73-sumpek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kacang43-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kepok30-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-keripik48-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kacang66-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-keripik6-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kemplang62-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-keripik19-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kembang17-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-keraktelor61-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-jus7-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kacang90-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-keripik57-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-keripik59-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-keripik58-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kentang98-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-keripik53-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kacang50-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-keripik12-devapp (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kacang32-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-keripik2-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kemplang2-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kembang11-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kacang2-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kemplang15-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kemplang52-riris (npm)
1 compromised version
Page 259 of 7,324