Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,277 total · sorted newest first- Aug 14, 2025
Malicious code in kite-nebula-jmk767-project (npm)
- Aug 14, 2025
Malicious code in kite-nautilus-xuw856-project (npm)
- Aug 14, 2025
Malicious code in kite-lava-dst303-project (npm)
- Aug 14, 2025
Malicious code in kite-jellyfish-cay885-project (npm)
- Aug 14, 2025
Malicious code in kite-infinity-lub379-project (npm)
- Aug 14, 2025
Malicious code in kite-galaxy-oee736-project (npm)
- Aug 14, 2025
Malicious code in kite-coral-wsr217-project (npm)
- Aug 14, 2025
Malicious code in kite-butterfly-cvi553-project (npm)
- Aug 14, 2025
Malicious code in kite-bonfire-gvl276-project (npm)
- Aug 14, 2025
Malicious code in kite-blossom-uir971-project (npm)
- Aug 14, 2025
Malicious code in kite-acorn-acs890-project (npm)
- Aug 14, 2025
Malicious code in kitchen-shopify-provisioner (npm)
- Aug 14, 2025
Malicious code in kisschat (npm)
- Aug 14, 2025
Malicious code in kismet_n88o7_qg3ic_illusion (npm)
- Aug 14, 2025
Malicious code in kismet_htksa_lkizq_xylophone (npm)
- Aug 14, 2025
Malicious code in kismet-whisper-nde416-project (npm)
- Aug 14, 2025
Malicious code in kismet-uu89h-xl76p-verdure-project (npm)
- Aug 14, 2025
Malicious code in kismet-nhxw8-ow6kg-nectar-project (npm)
- Aug 14, 2025
Malicious code in kismet-7lvgb-9jpwm-tempest-project (npm)
- Aug 14, 2025
Malicious code in kirogi (npm)
- Aug 14, 2025
Malicious code in kirbyterm (npm)
- Aug 14, 2025
Malicious code in kiokuryou (npm)
- Aug 14, 2025
Malicious code in kinvey-phonegap-angular-sdk (npm)
- Aug 14, 2025
Malicious code in kintisheff-sak (npm)
- Aug 14, 2025
Malicious code in kintisheff-geo (npm)
- Aug 14, 2025
Malicious code in kinterval (npm)
- Aug 14, 2025
Malicious code in kintek (npm)
- Aug 14, 2025
Malicious code in kinopoisk-yav-client (npm)
- Aug 14, 2025
Malicious code in kinopoisk-components (npm)
- Aug 14, 2025
Malicious code in kingweb (npm)
- Aug 14, 2025
Malicious code in kingofpol (npm)
- Aug 14, 2025
Malicious code in kingchos (npm)
- Aug 14, 2025
Malicious code in kinetic-release-it-perseus-ursa (npm)
- Aug 14, 2025
Malicious code in kinetic-mui-fornax-postcss (npm)
- Aug 14, 2025
Malicious code in kinetic-mongodb-lepton-rollup-plugin (npm)
- Aug 14, 2025
Malicious code in kinetic-inquirer-element-ui-chai (npm)
- Aug 14, 2025
Malicious code in kinetic-blackhole-meteor-global (npm)
- Aug 14, 2025
Malicious code in kinectfun (npm)
- Aug 14, 2025
Malicious code in kindle-fast-metrics-javascript-sdk (npm)
- Aug 14, 2025
Malicious code in kinabalu (npm)
- Aug 14, 2025
Malicious code in kiloman (npm)
- Aug 14, 2025
Malicious code in kilo-zulu-lemon-rdmmz (npm)
- Aug 14, 2025
Malicious code in kilo-y7c-project (npm)
- Aug 14, 2025
Malicious code in kilo-xylophone-lpne (npm)
- Aug 14, 2025
Malicious code in kilo-x4x-project (npm)
- Aug 14, 2025
Malicious code in kilo-watermelon-xray-utiot (npm)
- Aug 14, 2025
Malicious code in kilo-victor-yikz (npm)
- Aug 14, 2025
Malicious code in kilo-victor-lgal (npm)
- Aug 14, 2025
Malicious code in kilo-victor-flhg (npm)
- Aug 14, 2025
Malicious code in kilo-vanilla-eemw (npm)
Page 5963 of 7,326