Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,212 total · sorted newest first- Sep 17, 2026
Malicious code in kapafovgfiagnao-sagfa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapaogfao-safa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapai-afammnaa-ada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapai-afaa-agda (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapafovgiagapfao-safa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapai-afamnaa-agda (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapao-safa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapai-safoamaa-agda (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapai-afoamaa-agda (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapai-safoagmaa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapai-safma-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapai-safoag0maa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapai-afama-agda (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapafovgfiano-sagfa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapafovgfino-sagfa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapafovgipfao-safa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapian (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapino-samunu-mumadadabi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapai-safoamaa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapai-safmaa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapino-samnvu-ubdibi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapaogao-safa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapaovfino-sagfa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapino-samnvu-ubdvabi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapafovgpfao-safa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapino-samunu-mudavdabi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapino-samnvu-ubadibi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapino-samnvu-ubdvdabi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapai-safoag0amaa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapafovgfiagangagapfao-sagfa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapino-samunu-mudadabi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapino-samunu-mucdivdabi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapai-afammnaa-agda (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapino-samunu-mmdadabi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapafovgiaangapfao-safa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapino-samnvu-ubdbi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapino-samunu-mudvdabi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapafovgiaapfao-safa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kanchuan-nvrenxin-mihuo-nanrenzhen (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kanjidex (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kaocious (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kampas-kopling (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapafovgfiaganaao-sagfa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucc (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapafogfao-safa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapaao-safa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucj (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kangaroo-kiwi-3q02 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapafogpfao-safa-agada (npm)
1 compromised version
Page 285 of 7,325