Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,276 total · sorted newest first- Aug 14, 2025
Malicious code in kbezvoastwprqmdu (npm)
- Aug 14, 2025
Malicious code in kbcontrol (npm)
- Aug 14, 2025
Malicious code in kayqcs (npm)
- Aug 14, 2025
Malicious code in kayak-yam-duob (npm)
- Aug 14, 2025
Malicious code in kayak-drone-ypze (npm)
- Aug 14, 2025
Malicious code in kaus-unuk-miranda-radiant (npm)
- Aug 14, 2025
Malicious code in kaus-petrology-postcss-loader-andromeda (npm)
- Aug 14, 2025
Malicious code in kaus-pavo-grus-ignite (npm)
- Aug 14, 2025
Malicious code in kaus-oauth-chakra-ui-membrane (npm)
- Aug 14, 2025
Malicious code in kaus-less-karma-nova (npm)
- Aug 14, 2025
Malicious code in kaus-bootes-quark-sirius (npm)
- Aug 14, 2025
Malicious code in kaus-auth-hermes-parcel (npm)
- Aug 14, 2025
Malicious code in kaula (npm)
- Aug 14, 2025
Malicious code in kato-memory (npm)
- Aug 14, 2025
Malicious code in kato-local (npm)
- Aug 14, 2025
Malicious code in katari (npm)
- Aug 14, 2025
Malicious code in kastra-tachyon-andromeda-passport (npm)
- Aug 14, 2025
Malicious code in kastra-regulus-yonder-magnetosphere (npm)
- Aug 14, 2025
Malicious code in kastra-pm2-tardigrade-paleomagnetism (npm)
- Aug 14, 2025
Malicious code in kastra-neutronstar-tardigrade-perseus (npm)
- Aug 14, 2025
Malicious code in kastra-gravity-oauth-hermes (npm)
- Aug 14, 2025
Malicious code in kastra-flare-wasat-nodemon (npm)
- Aug 14, 2025
Malicious code in kasino (npm)
- Aug 14, 2025
Malicious code in kashable-mobile-common (npm)
- Aug 14, 2025
Malicious code in karone (npm)
- Aug 14, 2025
Malicious code in karma_m7rym_98yk3_vortex (npm)
- Aug 14, 2025
Malicious code in karma_ezdnq_hgl1e_phoenix (npm)
- Aug 14, 2025
Malicious code in karma_a70l3_z1fzv_kryptonite (npm)
- Aug 14, 2025
Malicious code in karma-webpack-deployment-test (npm)
- Aug 14, 2025
Malicious code in karma-ulx2j-ax8si-hearth-project (npm)
- Aug 14, 2025
Malicious code in karma-tmpl2html-preprocessor (npm)
- Aug 14, 2025
Malicious code in karma-repository-request-helmet (npm)
- Aug 14, 2025
Malicious code in karma-puida-4cu7u-quiver-project (npm)
- Aug 14, 2025
Malicious code in karma-middleware (npm)
- Aug 14, 2025
Malicious code in karma-jnaf9-xzor1-lavender-project (npm)
- Aug 14, 2025
Malicious code in karma-humanity-stack (npm)
- Aug 14, 2025
Malicious code in karma-hapi-sedna-testcafe (npm)
- Aug 14, 2025
Malicious code in karma-got-reveal-md-proxima (npm)
- Aug 14, 2025
Malicious code in karma-gatsby-virtualreality-concurrently (npm)
- Aug 14, 2025
Malicious code in karma-gatsby-nodejs-europa (npm)
- Aug 14, 2025
Malicious code in karma-b2ijo-n034e-yellow-project (npm)
- Aug 14, 2025
Malicious code in karma-550dy-x9a4k-gale-project (npm)
- Aug 14, 2025
Malicious code in karma-4wfu7-8esg8-twilight-project (npm)
- Aug 14, 2025
Malicious code in karma-4vbyb-kbfgk-juniper-project (npm)
- Aug 14, 2025
Malicious code in kardashevscale-markdown-pdf-cressida-fetch (npm)
- Aug 14, 2025
Malicious code in kardashevscale-hugo-wezen-luna (npm)
- Aug 14, 2025
Malicious code in kardashevscale-fornax-ceres-package (npm)
- Aug 14, 2025
Malicious code in kardashevscale-element-ui-element-ui-cosmogenic (npm)
- Aug 14, 2025
Malicious code in karboom (npm)
- Aug 14, 2025
Malicious code in karajinov (npm)
Page 5967 of 7,326