Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,204 total · sorted newest first- Sep 17, 2026
Malicious code in kapvino-saufdaggafoi-ugha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-soafadi-vannds (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-si-faogi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sif-fagada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-smoi-ugaha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-soafadi-vainafds (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sifaagima-fagada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-si-fag (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sifa-fagada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-samavu-idabi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-saufdaggafoi-ugaha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-saufdaagfi-ugha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-saufdafi-ugha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-soaf-vaidas (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-si-fagda (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sifagia-fagada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-saufdagfi-ugha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sifafagima-fagada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-siafafiama-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-si-faga (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-saufdaagfoi-ugha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-saufggfoi-ugaha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-soafadi-vanunds (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-soadffi-ugha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-siaiama-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-soafadi-vnfds (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-soadufafi-ugha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sifafafgiama-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sifafafiama-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-soadi-ugha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-soafadi-vnds (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sifagi-fagada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-saf-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-saufdggfoi-ugaha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sifagima-fagada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-smvu-idabi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-siaaiama-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sifafafgiama-fagada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-saufdggafoi-ugaha (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kappa-pi-nu-beta-lambda (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kappa-nu-daemon-async-bad (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapok-strawberry-fpcm (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapo-samu-maima (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapo-samu-mima (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kappa-awk-deploy-simulate-encrypt (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapo-samu-maifamava (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvfino-sagfa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kappa-gamma-byte-sandbox-cloud (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kappa-cache-process-byte-sudo (npm)
1 compromised version
Page 282 of 7,325