Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,199 total · sorted newest first- Sep 17, 2026
Malicious code in kapvino-sofgdi-gagofgfua (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sofaggdi-ugha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sofgdi-ggfua (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sofgdi-ugafaoha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sogdai-odgaagagu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sofagfgdi-ugaaoha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sofgdani-gagfafu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sofgdi-ugafaha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sofafgdi-ugaafaoha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sofgdi-gua (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sofgdi-ugaafaoha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sogdai-odgafaagagu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sogdai-dgagu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sofagfgdi-ugha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sogdai-ggu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sogdai-dgaagu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sogdai-dggu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sofagfgdi-ugaaha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sofgdi-ugafaa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sofgdi-uaa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sogdai-odgafaaggagu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sofgdani-gagofafu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sogani-odgafgu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-soffgdi-ugaafaoha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sofgdi-gagofagfua (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sofgdi-gaofgfua (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sofgdi-ugaffaoha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sofgdani-gagfu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sogdai-odgafadasggagu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sofgdani-gagofaffua (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sofagfgdi-ugaafaoha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sofgdi-gaogfua (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sofgdi-gagfua (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sogaoi-faoagi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sofgdi-gagoffagfua (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sofgdi-gfua (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sofgdi-uafa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sofagfgdi-ugafaoha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sofgdi-uafaa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sofgdani-gagofafua (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sogdai-odgafadaggagu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-socvnvi-bofafanavu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-socvni-gbfafgafaibssoi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-socvnvi-boadfgu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sof-vas (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sodi-ugha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-socvni-favci (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-socvnvi-boffnvu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-socvni-favcavai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-socvni-fuafavi (npm)
1 compromised version
Page 278 of 7,324