Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,276 total · sorted newest first- Aug 14, 2025
Malicious code in kilo-strawberry-golf-yajmo (npm)
- Aug 14, 2025
Malicious code in kilo-strawberry-alpha-hgule (npm)
- Aug 14, 2025
Malicious code in kilo-sierra-romeo-udrgn (npm)
- Aug 14, 2025
Malicious code in kilo-romeo-aayf (npm)
- Aug 14, 2025
Malicious code in kilo-quince-shqr (npm)
- Aug 14, 2025
Malicious code in kilo-quince-quebec-uaxlq (npm)
- Aug 14, 2025
Malicious code in kilo-qhp-project (npm)
- Aug 14, 2025
Malicious code in kilo-puw-project (npm)
- Aug 14, 2025
Malicious code in kilo-papaya-tango-pfsth (npm)
- Aug 14, 2025
Malicious code in kilo-papaya-2dp8 (npm)
- Aug 14, 2025
Malicious code in kilo-papa-vanilla-fcghz (npm)
- Aug 14, 2025
Malicious code in kilo-papa-mkyi (npm)
- Aug 14, 2025
Malicious code in kilo-orbit-0a1b (npm)
- Aug 14, 2025
Malicious code in kilo-opp-project (npm)
- Aug 14, 2025
Malicious code in kilo-november-mango-zyghn (npm)
- Aug 14, 2025
Malicious code in kilo-nectarine-aatr (npm)
- Aug 14, 2025
Malicious code in kilo-n7n-project (npm)
- Aug 14, 2025
Malicious code in kilo-n3g-project (npm)
- Aug 14, 2025
Malicious code in kilo-mrx-project (npm)
- Aug 14, 2025
Malicious code in kilo-mike-krvc (npm)
- Aug 14, 2025
Malicious code in kilo-mango-delta-drtjv (npm)
- Aug 14, 2025
Malicious code in kilo-lemon-kiwi-ipkpx (npm)
- Aug 14, 2025
Malicious code in kilo-kiwi-kqtn (npm)
- Aug 14, 2025
Malicious code in kilo-kc0-project (npm)
- Aug 14, 2025
Malicious code in kilo-k0f-project (npm)
- Aug 14, 2025
Malicious code in kilo-jzf-project (npm)
- Aug 14, 2025
Malicious code in kilo-juliet-izxr (npm)
- Aug 14, 2025
Malicious code in kilo-iw6-project (npm)
- Aug 14, 2025
Malicious code in kilo-india-grape-ungnb (npm)
- Aug 14, 2025
Malicious code in kilo-honeydew-fxvu (npm)
- Aug 14, 2025
Malicious code in kilo-hn3-project (npm)
- Aug 14, 2025
Malicious code in kilo-hbh-project (npm)
- Aug 14, 2025
Malicious code in kilo-g0h-project (npm)
- Aug 14, 2025
Malicious code in kilo-fig-november-kytrn (npm)
- Aug 14, 2025
Malicious code in kilo-elderberry-kiwi-tkusp (npm)
- Aug 14, 2025
Malicious code in kilo-e96-project (npm)
- Aug 14, 2025
Malicious code in kilo-dez-project (npm)
- Aug 14, 2025
Malicious code in kilo-date-tahm (npm)
- Aug 14, 2025
Malicious code in kilo-charlie-vanilla-knnrn (npm)
- Aug 14, 2025
Malicious code in kilo-charlie-gdwh (npm)
- Aug 14, 2025
Malicious code in kilo-bravo-uniform-ypfwo (npm)
- Aug 14, 2025
Malicious code in kilo-apple-pmcv (npm)
- Aug 14, 2025
Malicious code in kilo-87k-project (npm)
- Aug 14, 2025
Malicious code in kilo-79y-project (npm)
- Aug 14, 2025
Malicious code in kilo-621-project (npm)
- Aug 14, 2025
Malicious code in kilo-5h9-project (npm)
- Aug 14, 2025
Malicious code in kilo-5ca-project (npm)
- Aug 14, 2025
Malicious code in kilo-2d8-project (npm)
- Aug 14, 2025
Malicious code in kilo-193-project (npm)
- Aug 14, 2025
Malicious code in killllock (npm)
Page 5964 of 7,326