Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,212 total · sorted newest first- Sep 17, 2026
Malicious code in kamasada-buyad-aadsaffa (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-buyda-butania (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-natai-yolaraddi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kalins (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nati-ylfara (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-buysada-dair (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-natai-ylara (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-nati-espanyol (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-buyasada-dadir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-buyasada-daafdadir (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-buyasada-buyatad (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-buyada-dania (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-natai-yolaraaddi (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-natai-yolarad (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-buyada-butania (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamalameen (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-buyda-butaania (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-buyada-uadania (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kamasada-buyada-udania (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kaleidoscope_zveyk_qdbwf_legend (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kaleidoscope_2l0s6_8l7bg_fable (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kale-zebra-vfn993-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kaleidoscope_rc9vy_j5jkj_echo (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kale-xhxlp-pmkjh-lotus-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kale-hazel-bkno (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kale-ll0bm-ehsrg-horizon-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kaleidoscope_o29pi_6p2q4_ripple (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kale-yeti-jwh365-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kaleidoscope_lkrcu_kq1vq_jasmine (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kale-sierra-e61y (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kale-ocean-qah232-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kale-xray-0qcg (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kaleidoscope-amber-fga118-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kaleidoscope_042eg_jbbsp_infinity (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kale_cqp5y_topr7_glow (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kale-s6pxe-583sx-valley-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kaleidoscope_amyqx_0apfl_ripple (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kaleidoscope-volcano-qin433-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kale-zodiac-mnb231-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kale-x14vr-9y6vz-dynamo-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kale_xct5d_i8r9l_honey (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kale-jetty-sz12 (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kaleidoscope-nautilus-xur295-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kaleidoscope-jacket-mkz321-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kaleidoscope-honey-qmf958-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kale-jacket-cqr350-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kale-so06i-wv8wt-jungle-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kaleidoscope-jellyfish-dws925-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kaleidoscope-lagoon-gtt724-project (npm)
1 compromised version
- Sep 17, 2026
Malicious code in kale-kite-ykz423-project (npm)
1 compromised version
Page 291 of 7,325