Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,199 total · sorted newest first- Sep 17, 2026
Malicious code in kiki-bubur37-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-dodol3-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-bakwan55-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-bakwan7-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-buburayam65-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-bakwan76-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-bika87-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-buburayam25-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-brongkos29-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-brengkes94-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-bubur7-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-buburayam82-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-bakwan99-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-buburayam13-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-brongkos79-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-brongkos37-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-bika97-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-brongkos58-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-bakwan25-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-asinan61-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-bubursumsum82-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-bubur42-kyuki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-brengkes54-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-brongkos45-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-bika15-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-bika64-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-bakso63-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-brengkes71-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-dodol30-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-bika87-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-bakwan52-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-bubursumsum43-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-bika89-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-botok57-ruro (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-asinan35-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-buburayam90-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-brengkes49-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-bakwan10-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-bubur41-miaww (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-brengkes9-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-buburayam82-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-brengkes34-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-bakso40-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kidt-aog-uvuffacaifaafiv (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kidt-aog-ufav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kidt-aog-uv (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kidt-avog-uvuffacfafv (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kidt-avog-uvuffacfaafv (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kidt-avog-uufcav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kidt-aog-uvuffaaifaafiv (npm)
1 compromised version
Page 262 of 7,324