Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,204 total · sorted newest first- Sep 17, 2026
Malicious code in kapio-samunu-mumad (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapino-samvnvu-ubadibi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapio-samunu-mvma (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapio-samunu-maivcavma (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapino-samvnavu-bidabi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapio-samunu-mumadi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapino-samunvu-udvdabi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapio-samunu-maivvma (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapino-samunu-mumdadabi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapino-samunvu-mucdivdabi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapio-samunu-mma (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapio-samunu-mumadadi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapino-samunvu-mucdvdabi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapio-samunu-mumadadbi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapio-samunu-muma (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapio-samunu-mavvma (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapino-samunvu-mudvdabi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapino-samunvu-ubdvdabi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapio-samunu-mumadadabi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapino-samvnavu-bidbi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapio-samunu-mvvma (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapino-samvnvu-ubdibi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapio-samunu-maivavma (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapafovgfiagangagapfao-safa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapafovgfiagangagapao-sagfa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapai-safoa0amaa-agda (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapafovgiaanggapfao-safa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapai-safomaa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapafovgiangapfao-safa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapafovgfiagno-sagfa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapafovgfiaganggapfao-safa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapafovgiapfao-safa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapino-samunu-mdadabi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapai-safoaamaa-agda (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapino-samnvu-ubdabi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapino-samunu-mudaavdabi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapai-afaaa-agda (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapagao-safa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapai-safoa0amaa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapai-afammnaaa-ada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapafovgfiagnaao-sagfa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapai-safa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapafovgfiagnao-sagfa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapaogfao-safa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapai-afammnaa-ada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapai-afaa-agda (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapafovgiagapfao-safa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapai-afamnaa-agda (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapao-safa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapai-safoamaa-agda (npm)
1 compromised version
Page 284 of 7,325