Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,198 total · sorted newest first- Sep 17, 2026
Malicious code in kiki-kacang59-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kembang30-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kentang40-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kacang40-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kembang95-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-keripik58-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kembang40-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kepok98-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-keraktelor36-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-kepok43-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-jus72-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-keripik50-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-keraktelor38-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-jamblang96-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-getas55-sumpek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gudeg16-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-getas32-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-ikan49-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-getuk73-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-jamblang75-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gorengan97-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-ikan56-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gorengan71-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-getas85-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gorengan45-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gaplek7-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-ikan67-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-jus2-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-getas20-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-getuk69-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-ikan86-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-jengkol75-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-jengkol45-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gulai24-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gulai18-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gorengan91-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-getuk20-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-jengkol58-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-jamblang14-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gudeg50-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gorengan74-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gembus85-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gulai15-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-getas91-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gepuk18-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gulai64-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gulai51-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gembus38-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-gembus43-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-jus43-breki (npm)
1 compromised version
Page 260 of 7,324