Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,212 total · sorted newest first- Sep 17, 2026
Malicious code in kamonetucbzl (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetuce (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucl (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetuck (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kanaquiz (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetum (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kangaroo-ziggurat-hg4z (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetuq (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kangaroo-meteor-y7m1 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kangaroo-dwarf-dqx2 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbzo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucd (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kanzeon (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kanborasd (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucg (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapafovgfiagangagaao-sagfa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetuzx (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapafovgfiaanggapfao-safa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetuv (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kanxt (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapa-safa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetuci (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapafovgfiagangaao-sagfa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucx (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kangaroo-underpass-kdg1 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetuch (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kapafovfino-sagfa-agada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucba (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbw (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucaj (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbzd (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbr (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucah (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbzh (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucam (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucaf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucau (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucal (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucaw (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbz (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbg (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbv (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbzf (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbk (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbzg (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbzc (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucak (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbm (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbzab (npm)
1 compromised version
Page 286 of 7,325