Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,277 total · sorted newest first- Aug 14, 2025
Malicious code in kiwi-ik0-project (npm)
- Aug 14, 2025
Malicious code in kiwi-icicle-hek291-project (npm)
- Aug 14, 2025
Malicious code in kiwi-icicle-gvn103-project (npm)
- Aug 14, 2025
Malicious code in kiwi-hotel-ubwd (npm)
- Aug 14, 2025
Malicious code in kiwi-honeydew-znpi (npm)
- Aug 14, 2025
Malicious code in kiwi-grape-wwo9 (npm)
- Aug 14, 2025
Malicious code in kiwi-g57-project (npm)
- Aug 14, 2025
Malicious code in kiwi-fjord-lgt030-project (npm)
- Aug 14, 2025
Malicious code in kiwi-fig-nectarine-makte (npm)
- Aug 14, 2025
Malicious code in kiwi-fern-yhv473-project (npm)
- Aug 14, 2025
Malicious code in kiwi-falcon-nvg238-project (npm)
- Aug 14, 2025
Malicious code in kiwi-falcon-ioh164-project (npm)
- Aug 14, 2025
Malicious code in kiwi-elderberry-mkwj (npm)
- Aug 14, 2025
Malicious code in kiwi-eky-project (npm)
- Aug 14, 2025
Malicious code in kiwi-eagle-zmp604-project (npm)
- Aug 14, 2025
Malicious code in kiwi-e46-project (npm)
- Aug 14, 2025
Malicious code in kiwi-dragonfruit-m9v7 (npm)
- Aug 14, 2025
Malicious code in kiwi-date-xvpo (npm)
- Aug 14, 2025
Malicious code in kiwi-date-mango-rtcws (npm)
- Aug 14, 2025
Malicious code in kiwi-date-hzjx (npm)
- Aug 14, 2025
Malicious code in kiwi-cloud-zor772-project (npm)
- Aug 14, 2025
Malicious code in kiwi-cherry-eaob (npm)
- Aug 14, 2025
Malicious code in kiwi-charlie-vzpm (npm)
- Aug 14, 2025
Malicious code in kiwi-charlie-ujeb (npm)
- Aug 14, 2025
Malicious code in kiwi-butterfly-pnk006-project (npm)
- Aug 14, 2025
Malicious code in kiwi-bridge-9mkv (npm)
- Aug 14, 2025
Malicious code in kiwi-banana-esie (npm)
- Aug 14, 2025
Malicious code in kiwi-bamboo-fpq617-project (npm)
- Aug 14, 2025
Malicious code in kiwi-b9c-project (npm)
- Aug 14, 2025
Malicious code in kiwi-apple-awfb (npm)
- Aug 14, 2025
Malicious code in kiwi-aib-project (npm)
- Aug 14, 2025
Malicious code in kiwi-acorn-trz905-project (npm)
- Aug 14, 2025
Malicious code in kiwi-8xo-project (npm)
- Aug 14, 2025
Malicious code in kiwi-8rq-project (npm)
- Aug 14, 2025
Malicious code in kiwi-85t-project (npm)
- Aug 14, 2025
Malicious code in kiwi-5p3-project (npm)
- Aug 14, 2025
Malicious code in kiwi-1in-project (npm)
- Aug 14, 2025
Malicious code in kiwi-11i-project (npm)
- Aug 14, 2025
Malicious code in kivra_accounts (npm)
- Aug 14, 2025
Malicious code in kittcv (npm)
- Aug 14, 2025
Malicious code in kitidea (npm)
- Aug 14, 2025
Malicious code in kite-zephyr-lfp952-project (npm)
- Aug 14, 2025
Malicious code in kite-zenith-ayc406-project (npm)
- Aug 14, 2025
Malicious code in kite-zenith-acr160-project (npm)
- Aug 14, 2025
Malicious code in kite-zebra-ivk392-project (npm)
- Aug 14, 2025
Malicious code in kite-xerus-piz525-project (npm)
- Aug 14, 2025
Malicious code in kite-violet-vot485-project (npm)
- Aug 14, 2025
Malicious code in kite-tide-ujy175-project (npm)
- Aug 14, 2025
Malicious code in kite-quill-rbc948-project (npm)
- Aug 14, 2025
Malicious code in kite-nimbus-qim719-project (npm)
Page 5962 of 7,326