Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,199 total · sorted newest first- Sep 17, 2026
Malicious code in kidt-aog-uvuffacfeaaifaafiv (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kidt-avog-uucav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kidt-avog-uvuffacfeaaiafv (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-asinan85-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kidt-avog-uvuffacfeaaifv (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kidt-avog-uufacav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kidt-aog-uvufafiv (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kidt-avog-u (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kidt-avog-uvuffacfeaaiafiv (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kidt-avog-uvufacfav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kidt-avog-uvufacav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kik-starter (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kidt-aog-uvufaifaafiv (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-asinan28-riris (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kidt-aog-uvufaafiv (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-bakwan48-sukiwir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kidt-aog-uvuifaafiv (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kidt-avog-uvuffacfeaaifaafiv (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiehtk-devapptea (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-bakwan46-breki (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kidt-aog-ufaiv (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiki-asinan47-sluey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kievzplxrqshbgof (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kifshare (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kidt-aog-uvuffaifaafiv (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kicl-gl-provisioningapp-ui (npm)
1 compromised version
- Sep 17, 2026
Malicious code in khalidbaguette (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keyzen (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kidt-aog-ufafiv (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiapasa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in khttpd (npm)
1 compromised version
- Sep 17, 2026
Malicious code in khmfpi-devapptea (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kftsrxlpagdjhkvz (npm)
1 compromised version
- Sep 17, 2026
Malicious code in khurramtahir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kibana-release-notes (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kickass-component-library (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kibiutils (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kidt-aog-u (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kickbank (npm)
1 compromised version
- Sep 17, 2026
Malicious code in khalilnabeel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in khsgkyqmbjnuivpf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kibana-github-actions (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kfsnaser (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kfalasa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kidt-acvog-uu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kickabout (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiatu-bolivia (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kiddygeek (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kidsense (npm)
1 compromised version
- Sep 17, 2026
Malicious code in khalidcroissant (npm)
1 compromised version
Page 263 of 7,324