Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,277 total · sorted newest first- Aug 14, 2025
Malicious code in kopul-cli (npm)
- Aug 14, 2025
Malicious code in kopimia (npm)
- Aug 14, 2025
Malicious code in kopibot (npm)
- Aug 14, 2025
Malicious code in kontemp (npm)
- Aug 14, 2025
Malicious code in konora (npm)
- Aug 14, 2025
Malicious code in konflikto (npm)
- Aug 14, 2025
Malicious code in koncolx (npm)
- Aug 14, 2025
Malicious code in konani (npm)
- Aug 14, 2025
Malicious code in konacli (npm)
- Aug 14, 2025
Malicious code in komputer (npm)
- Aug 14, 2025
Malicious code in kommvahl (npm)
- Aug 14, 2025
Malicious code in komacorp (npm)
- Aug 14, 2025
Malicious code in koltron-project (npm)
- Aug 14, 2025
Malicious code in kolstat (npm)
- Aug 14, 2025
Malicious code in kolmobile (npm)
- Aug 14, 2025
Malicious code in kokoro-tts (npm)
- Aug 14, 2025
Malicious code in kokboka (npm)
- Aug 14, 2025
Malicious code in koelsch (npm)
- Aug 14, 2025
Malicious code in koedvulqjwxrmska (npm)
- Aug 14, 2025
Malicious code in kodsuli (npm)
- Aug 14, 2025
Malicious code in kodeks (npm)
- Aug 14, 2025
Malicious code in kocal-server (npm)
- Aug 14, 2025
Malicious code in kocal (npm)
- Aug 14, 2025
Malicious code in kobliha (npm)
- Aug 14, 2025
Malicious code in koala-zenith-ntb487-project (npm)
- Aug 14, 2025
Malicious code in koala-xerus-gvd334-project (npm)
- Aug 14, 2025
Malicious code in koala-xerox-eky245-project (npm)
- Aug 14, 2025
Malicious code in koala-uranium-agp734-project (npm)
- Aug 14, 2025
Malicious code in koala-sapphire-omn644-project (npm)
- Aug 14, 2025
Malicious code in koala-quasar-snk474-project (npm)
- Aug 14, 2025
Malicious code in koala-nugget-rfx340-project (npm)
- Aug 14, 2025
Malicious code in koala-lagoon-ova095-project (npm)
- Aug 14, 2025
Malicious code in koala-jungle-wok275-project (npm)
- Aug 14, 2025
Malicious code in koala-jade-xvv523-project (npm)
- Aug 14, 2025
Malicious code in koala-hedgehog-dra160-project (npm)
- Aug 14, 2025
Malicious code in koala-frost-nfk075-project (npm)
- Aug 14, 2025
Malicious code in koala-crystal-lwy848-project (npm)
- Aug 14, 2025
Malicious code in koa-vulcan-auth-quasarjet (npm)
- Aug 14, 2025
Malicious code in koa-uglify-js-css-minimizer-webpack-plugin-tectonophysics (npm)
- Aug 14, 2025
Malicious code in koa-speleology-greatfilter-gravitationalwave (npm)
- Aug 14, 2025
Malicious code in koa-redisy (npm)
- Aug 14, 2025
Malicious code in koa-react-sidecar (npm)
- Aug 14, 2025
Malicious code in koa-radioastronomy-cosmogenic-mongoose (npm)
- Aug 14, 2025
Malicious code in koa-mq (npm)
- Aug 14, 2025
Malicious code in koa-meteor-foundation-express (npm)
- Aug 14, 2025
Malicious code in koa-holography-charon-blueshift (npm)
- Aug 14, 2025
Malicious code in koa-highway (npm)
- Aug 14, 2025
Malicious code in koa-callback-ursa-private (npm)
- Aug 14, 2025
Malicious code in koa-body-parse (npm)
- Aug 14, 2025
Malicious code in knykode (npm)
Page 5959 of 7,326