Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,204 total · sorted newest first- Sep 17, 2026
Malicious code in kapvino-samvnavu-bidabi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapok-blackhole-wuav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-sagfa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapo-samu-maifma (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kappa-lambda-bundle-omega-bad (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapovfino-sagfa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapok-bravo-sfb2 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapok-hazel-w31k (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapsel-plugin-i18n (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapok-apple-17oe (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-saiama-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapo-sau-mima (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-samvu-idabi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kappa-debug-lambda-daemon-upsilon (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kappa-encrypt-public-rho-boolean (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kappa-eta-theta-sandbox-user (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapo-samu-maifamva (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapo-samunu-maiavcava (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapo-samunu-maiavava (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-saama-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-samvnavu-idabi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-saaa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kappaking (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapo-samunu-miavava (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-safa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kappa-notify-web-encrypt-iota (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapvino-saa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapok-supernova-ap4u (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapo-samnu-mva (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapo-sadamud-mima (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapo-samnu-mimva (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapo-samnu-miavva (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapo-sadamuda-mima (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapo-samnu-maimava (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapo-samnu-mmva (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapo-sadamuda-mimaua (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapo-samnu-miavava (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapo-sadau-mima (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapo-samnu-maifmava (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapo-samu-maifama (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapo-samnu-maifamava (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapo-samnu-maimva (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapo-samnu-miva (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapo-sadamuda-mimanua (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapo-sadamuda-mimanuad (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapino-samvnvu-bibi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapio-samunu-mumaddi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapo-sadamu-mima (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapio-samunu-maiavcavma (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapino-samvnavu-bibi (npm)
1 compromised version
Page 283 of 7,325