Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,199 total · sorted newest first- Sep 17, 2026
Malicious code in karem1 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kardashevscale-hugo-wezen-luna (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sovni-gffsi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in karemzz (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sovni-sgfi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in karem9 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in karemm7 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in karem3 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in karabulin (npm)
1 compromised version
- Sep 17, 2026
Malicious code in karma-4wfu7-8esg8-twilight-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in karemm4 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kardashevscale-transport-tailwindcss-dynamo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in karemm2 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kardashevscale-accretion-borealis-archaeometry (npm)
1 compromised version
- Sep 17, 2026
Malicious code in karma-build-sass-loader-kastra (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kardashevscale-dotenv-safe-callisto-quasarjet (npm)
1 compromised version
- Sep 17, 2026
Malicious code in karimbaguette (npm)
1 compromised version
- Sep 17, 2026
Malicious code in karem2 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in karem4 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kardashevscale-fornax-ceres-package (npm)
1 compromised version
- Sep 17, 2026
Malicious code in karma-atlas-bulma-ini (npm)
1 compromised version
- Sep 17, 2026
Malicious code in karma-550dy-x9a4k-gale-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in karemm1 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sovni-gfsi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in karemz (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sovni-gbfffsi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sovni-farsvi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sovni-farsamvi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sovni-gbfafgafaibssi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sovni-farsavamvi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sovni-gbfafgafsi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sovni-fsgfi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sovni-farvi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sovni-gbffafsi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sovni-gbfafgafaisi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sovni-gbfafgafaibsi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sovni-fffsgfi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sovni-farvavi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sovni-gbfafgafaibssoi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sovni-ffsgfi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sovni-farsvamvi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sovni-gbffsi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sovni-gbfafgafisi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sovni-gbfafafsi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-soni-fuvdavaiova (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-soni-fuvdavioa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sovni-farsacvamvi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-soni-fuvdavaibopva (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-soovni-fafgsjkfskfsgfi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sooi-faoagi (npm)
1 compromised version
Page 275 of 7,324