Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,212 total · sorted newest first- Sep 17, 2026
Malicious code in kamasada-nuysata-bunajadab (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuyata-buyatad (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuyata-buyat (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuyata-busdadida (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuyata-buyaatad (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuyata-buya (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuyata-bustad (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuyata-bunja (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nutsai-kaffa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nutia-vesto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nutsai-kadffa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuyata-bubayati (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuyata-bunajda (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nutai-ksdyased (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nutfasai-aadsaffa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nutai-kd (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nutai-kyased (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuyata-bubyati (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nutai-kaed (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nutsai-asaffa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nutai-ksdyasaed (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nutai-kyaed (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nutasai-aadsaffa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nutai-ksyased (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nutsai-affa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuyata-budad (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuyata-bud (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nutsai-kadrfifa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nutsai-aaffa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nutai-kadrifa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuyata-budd (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nutai-kadi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nutsai-aasaffa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nutai-ksdyasaedi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuyata-buad (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nutsai-afa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuyata-budadi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuyata-bunaja (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuyata-busad (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nutsai-aadsaffa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nutai-kadria (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuyata-budadia (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nutsai-kadrffa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nutsai-kafa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nusata-buajdiba (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nutafasai-aadsaffa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nusata-bujiba (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nusta-budadan (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuatia-vesto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nusata-bujib (npm)
1 compromised version
Page 288 of 7,325