Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,160 total in npm · sorted newest first- May 12, 2026
Malicious code in @uipath/packager-tool-case (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/packager-tool-case
1 compromised version
- May 12, 2026
Malicious code in @uipath/packager-tool-bpmn (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/packager-tool-bpmn
1 compromised version
- May 12, 2026
Malicious code in @uipath/packager-tool-apiworkflow (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/packager-tool-apiworkflow
1 compromised version
- May 12, 2026
Malicious code in @uipath/orchestrator-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/orchestrator-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/maestro-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/maestro-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/maestro-sdk (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/maestro-sdk
1 compromised version
- May 12, 2026
Malicious code in @uipath/llmgw-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/llmgw-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/integrationservice-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/integrationservice-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/integrationservice-sdk (npm)
1 compromised version
- May 12, 2026
Malicious code in @uipath/insights-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/integrationservice-sdk
1 compromised version
- May 12, 2026
Malware in @uipath/insights-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/insights-sdk (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/insights-sdk
1 compromised version
- May 12, 2026
Malicious code in wot-api (npm)
5 compromised versions
- May 12, 2026
Malware in wot-api
1 compromised version
- May 12, 2026
Malicious code in safe-action (npm)
2 compromised versions
- May 12, 2026
Malware in safe-action
1 compromised version
- May 12, 2026
Malicious code in nextmove-mcp (npm)
5 compromised versions
- May 12, 2026
Malware in nextmove-mcp
1 compromised version
- May 12, 2026
Malicious code in cmux-agent-mcp (npm)
6 compromised versions
- May 12, 2026
Malware in cmux-agent-mcp
1 compromised version
- May 12, 2026
Malicious code in @uipath/identity-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/identity-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/gov-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/gov-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/functions-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/functions-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/flow-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/flow-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/filesystem (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/filesystem
1 compromised version
- May 12, 2026
Malicious code in @uipath/docsai-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/docsai-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/data-fabric-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/data-fabric-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/context-grounding-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/context-grounding-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/common (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/common
1 compromised version
- May 12, 2026
Malicious code in @uipath/codedapp-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/codedapp-tool
1 compromised version
Page 108 of 4,804