Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,276 total · sorted newest first- Aug 14, 2025
Malicious code in kikiru (npm)
- Aug 14, 2025
Malicious code in kiki-tempe72-sukiwir (npm)
- Aug 14, 2025
Malicious code in kiki-mendoan69-sukiwir (npm)
- Aug 14, 2025
Malicious code in kiki-kue74-breki (npm)
- Aug 14, 2025
Malicious code in kik-starter (npm)
- Aug 14, 2025
Malicious code in kifshare (npm)
- Aug 14, 2025
Malicious code in kievzplxrqshbgof (npm)
- Aug 14, 2025
Malicious code in kidsense (npm)
- Aug 14, 2025
Malicious code in kiddygeek (npm)
- Aug 14, 2025
Malicious code in kickbank (npm)
- Aug 14, 2025
Malicious code in kickass-component-library (npm)
- Aug 14, 2025
Malicious code in kickabout (npm)
- Aug 14, 2025
Malicious code in kiapasa (npm)
- Aug 14, 2025
Malicious code in khttpd (npm)
- Aug 14, 2025
Malicious code in khsgkyqmbjnuivpf (npm)
- Aug 14, 2025
Malicious code in kftsrxlpagdjhkvz (npm)
- Aug 14, 2025
Malicious code in kfsnaser (npm)
- Aug 14, 2025
Malicious code in kfalasa (npm)
- Aug 14, 2025
Malicious code in keyzen (npm)
- Aug 14, 2025
Malicious code in keyy (npm)
- Aug 14, 2025
Malicious code in keystone_yzv2t_pq7nv_solstice (npm)
- Aug 14, 2025
Malicious code in keystone_lldfp_zswue_hush (npm)
- Aug 14, 2025
Malicious code in keystone_h41zw_fglov_rainbow (npm)
- Aug 14, 2025
Malicious code in keystone_6bvec_7pepr_zodiac (npm)
- Aug 14, 2025
Malicious code in keystone_0bzhd_89wv0_blossom (npm)
- Aug 14, 2025
Malicious code in keystone-quzon-wwl1d-yonder-project (npm)
- Aug 14, 2025
Malicious code in keystone-q9lbl-2l4ff-quiver-project (npm)
- Aug 14, 2025
Malicious code in keystone-l3lm5-zmvsr-birch-project (npm)
- Aug 14, 2025
Malicious code in keystone-8xuj0-kbwlm-xenith-project (npm)
- Aug 14, 2025
Malicious code in keystone-4rmyi-tz6yz-nebula-project (npm)
- Aug 14, 2025
Malicious code in keystone-4r8qt-gojpm-fjord-project (npm)
- Aug 14, 2025
Malicious code in keycmd (npm)
- Aug 14, 2025
Malicious code in keycaster (npm)
- Aug 14, 2025
Malicious code in key_value_model (npm)
- Aug 14, 2025
Malicious code in key-sigma-dog-slow-authorize (npm)
- Aug 14, 2025
Malicious code in key-recovery-service-v2 (npm)
- Aug 14, 2025
Malicious code in key-pi-string-byte-easy (npm)
- Aug 14, 2025
Malicious code in kettlers (npm)
- Aug 14, 2025
Malicious code in kestrel_xytu1_61sdy_meadow (npm)
- Aug 14, 2025
Malicious code in kestrel_w9n41_eqgxd_kaleidoscope (npm)
- Aug 14, 2025
Malicious code in kestrel_ropuk_yjllf_quicksilver (npm)
- Aug 14, 2025
Malicious code in kestrel_r5j8s_lh6f6_crystal (npm)
- Aug 14, 2025
Malicious code in kestrel_pymox_6wh87_ocean (npm)
- Aug 14, 2025
Malicious code in kestrel_6udmw_ispp1_hush (npm)
- Aug 14, 2025
Malicious code in kestrel-zrs7t-6e2fc-lavender-project (npm)
- Aug 14, 2025
Malicious code in kestrel-ziyzj-cbipt-quicksilver-project (npm)
- Aug 14, 2025
Malicious code in kestrel-uplift-psk732-project (npm)
- Aug 14, 2025
Malicious code in kestrel-iuz5s-c3us9-dynamo-project (npm)
- Aug 14, 2025
Malicious code in kestrel-bn23z-8ai06-ember-project (npm)
- Aug 14, 2025
Malicious code in kespapp (npm)
Page 5965 of 7,326