Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,281 total · sorted newest first- Aug 14, 2025
Malicious code in labyrint (npm)
- Aug 14, 2025
Malicious code in labsheets (npm)
- Aug 14, 2025
Malicious code in labruna (npm)
- Aug 14, 2025
Malicious code in labber (npm)
- Aug 14, 2025
Malicious code in la-widget-login (npm)
- Aug 14, 2025
Malicious code in la-interactive-readerui (npm)
- Aug 14, 2025
Malicious code in l3mon-dashboard (npm)
- Aug 14, 2025
Malicious code in l3mon-chat (npm)
- Aug 14, 2025
Malicious code in l3mon-blog (npm)
- Aug 14, 2025
Malicious code in l3mon (npm)
- Aug 14, 2025
Malicious code in l10n-mgr (npm)
- Aug 14, 2025
Malicious code in kzmvopafdywcukxs (npm)
- Aug 14, 2025
Malicious code in kz-fe-v3 (npm)
- Aug 14, 2025
Malicious code in kyso-instance-server (npm)
- Aug 14, 2025
Malicious code in kyso-cloud (npm)
- Aug 14, 2025
Malicious code in kylinjs (npm)
- Aug 14, 2025
Malicious code in kyc-sdk-javascript (npm)
- Aug 14, 2025
Malicious code in kwtest-styleguide (npm)
- Aug 14, 2025
Malicious code in kwpresent (npm)
- Aug 14, 2025
Malicious code in kwappen (npm)
- Aug 14, 2025
Malicious code in kw-styles (npm)
- Aug 14, 2025
Malicious code in kvasirapi (npm)
- Aug 14, 2025
Malicious code in kvanity (npm)
- Aug 14, 2025
Malicious code in kutgmbawxcorveif (npm)
- Aug 14, 2025
Malicious code in kusahaeru (npm)
- Aug 14, 2025
Malicious code in kurskvwnliatdpoq (npm)
- Aug 14, 2025
Malicious code in kurniawan-tongseng29-breki (npm)
- Aug 14, 2025
Malicious code in kurniawan-semur87-breki (npm)
- Aug 14, 2025
Malicious code in kurniawan-semur13-breki (npm)
- Aug 14, 2025
Malicious code in kurniawan-saguer46-sukiwir (npm)
- Aug 14, 2025
Malicious code in kurniawan-rendang99-kuki (npm)
- Aug 14, 2025
Malicious code in kurniawan-martabak58-breki (npm)
- Aug 14, 2025
Malicious code in kurniawan-kue34-kuki (npm)
- Aug 14, 2025
Malicious code in kurniawan-klanting18-breki (npm)
- Aug 14, 2025
Malicious code in kurniawan-kepok100-breki (npm)
- Aug 14, 2025
Malicious code in kurniawan-kentang75-sukiwir (npm)
- Aug 14, 2025
Malicious code in kurniawan-gembus21-kuki (npm)
- Aug 14, 2025
Malicious code in kurniawan-botok61-breki (npm)
- Aug 14, 2025
Malicious code in kurnia-sambalado28-sukiwir (npm)
- Aug 14, 2025
Malicious code in kurnia-rawon62-breki (npm)
- Aug 14, 2025
Malicious code in kurnia-ongol-ongol51-sukiwir (npm)
- Aug 14, 2025
Malicious code in kurnia-nasisayur64-kuki (npm)
- Aug 14, 2025
Malicious code in kurnia-nasicampur75-breki (npm)
- Aug 14, 2025
Malicious code in kurnia-kue32-breki (npm)
- Aug 14, 2025
Malicious code in kurnia-jus88-sukiwir (npm)
- Aug 14, 2025
Malicious code in kurnia-getuk5-breki (npm)
- Aug 14, 2025
Malicious code in kurnia-dodol21-breki (npm)
- Aug 14, 2025
Malicious code in kurnia-bakwan30-breki (npm)
- Aug 14, 2025
Malicious code in kurdish-time (npm)
- Aug 14, 2025
Malicious code in kupciaapp (npm)
Page 5957 of 7,326