Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,160 total in npm · sorted newest first- May 12, 2026
Malicious code in @uipath/uipath-python-bridge (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/uipath-python-bridge
1 compromised version
- May 12, 2026
Malicious code in @uipath/ui-widgets-multi-file-upload (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/ui-widgets-multi-file-upload
1 compromised version
- May 12, 2026
Malicious code in @uipath/traces-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/traces-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/tool-workflowcompiler (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/tool-workflowcompiler
1 compromised version
- May 12, 2026
Malicious code in @uipath/test-manager-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/test-manager-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/telemetry (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/telemetry
1 compromised version
- May 12, 2026
Malicious code in @uipath/tasks-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/tasks-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/solutionpackager-tool-core (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/solutionpackager-tool-core
1 compromised version
- May 12, 2026
Malicious code in @uipath/solutionpackager-sdk (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/solutionpackager-sdk
1 compromised version
- May 12, 2026
Malicious code in @uipath/solution-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/solution-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/solution-packager (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/solution-packager
1 compromised version
- May 12, 2026
Malicious code in @uipath/rpa-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/rpa-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/rpa-legacy-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/rpa-legacy-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/robot (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/robot
1 compromised version
- May 12, 2026
Malicious code in @uipath/resources-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/resources-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/resourcecatalog-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/resourcecatalog-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/resource-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/resource-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/project-packager (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/project-packager
1 compromised version
- May 12, 2026
Malicious code in @uipath/platform-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/platform-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/packager-tool-workflowcompiler (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/packager-tool-workflowcompiler
1 compromised version
- May 12, 2026
Malicious code in @uipath/packager-tool-workflowcompiler-browser (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/packager-tool-workflowcompiler-browser
1 compromised version
- May 12, 2026
Malicious code in @uipath/packager-tool-webapp (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/packager-tool-webapp
1 compromised version
- May 12, 2026
Malicious code in @uipath/packager-tool-functions (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/packager-tool-functions
1 compromised version
- May 12, 2026
Malicious code in @uipath/packager-tool-flow (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/packager-tool-flow
1 compromised version
- May 12, 2026
Malicious code in @uipath/packager-tool-connector (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/packager-tool-connector
1 compromised version
Page 107 of 4,804