Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,199 total · sorted newest first- Sep 17, 2026
Malicious code in kernel-stack-grep-zero-table (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-57 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-81 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-78 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-69 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kernel-encode-benchmark-interface-virtualize (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-67 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-70 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in keouzn-devapptea (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-79 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-68 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-71 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-7 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kernel-abstract-compile-proxy-orchestrate (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-60 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-77 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kernel-iota-simple-simulate-integer (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-62 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-65 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-80 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-59 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-26 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-48 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-42 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-36 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-56 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-51 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-45 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-27 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-38 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-5 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-31 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-29 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-33 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-39 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-4 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-28 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-55 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-35 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-34 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-40 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-46 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-41 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-30 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-23 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-52 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-3 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-50 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-44 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kentung-47 (npm)
1 compromised version
Page 268 of 7,324