Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,212 total · sorted newest first- Sep 17, 2026
Malicious code in kamasada-ntai-yoladi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuati-espa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuati-vebsda (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-ntai-kyai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-natib-yl (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-natib-yalua (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuati-vesda (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-ntai-ksdyasadi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-ntai-ksdyasaedi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuati-espanyol (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-ntai-ksdyaai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuatia-veasoto (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nuati-espanyo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-natib-yalufa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nati-ylara (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-natib-yal (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-natib-yalufar (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-buyada-butan (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-buyada-dair (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-buyada-asdafafa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nati-espanyole (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-buyada-buadania (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-buyasada-dafdair (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-buyada-butadania (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nati-sayl (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-buyasada-dadair (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kaltura-player-js (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-buyada-bua (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-buyasada-dafdadir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-buyada-dai (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-buyda-butadania (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kali-dywoman (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nati-ayl (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kaluza-careers (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-buyada-dani (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamalfahad (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kalyet-were (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-buyada-asafafa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-buyda-budtadania (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nati-yalufara (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-buyada-asaffa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nati-esayl (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kalmancpp (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamalkumar (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-natai-yolara (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-buyada-buta (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-buyada-budtadania (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nati-esanyl (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nati-yl (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-buyasada-buytad (npm)
1 compromised version
Page 290 of 7,325