Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,212 total · sorted newest first- Sep 17, 2026
Malicious code in kamonetucbx (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbzn (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbc (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbd (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbt (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbza (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbs (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbp (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbzj (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucao (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbzaa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbh (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbn (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbzm (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbj (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbzb (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucav (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbzk (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbzi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucby (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucaz (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbe (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucaq (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbl (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucap (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucan (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucbze (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuysata-budnajsadab (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucae (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuyta-buyatad (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuyata-buystad (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuysata-bunajada (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuysata-bunajsadab (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucac (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamilzakievtest (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamoah (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucad (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamilcroissant (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetu (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuysata-bunajda (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamel (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetuca (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucab (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamonetucaa (npm)
1 compromised version
Page 287 of 7,325