Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
240,160 total in npm · sorted newest first- May 12, 2026
Malicious code in @uipath/codedagents-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/codedagents-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/codedagent-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/codedagent-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/cli (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/cli
1 compromised version
- May 12, 2026
Malicious code in @uipath/case-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/case-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/auth (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/auth
1 compromised version
- May 12, 2026
Malicious code in @uipath/apollo-wind (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/apollo-wind
1 compromised version
- May 12, 2026
Malicious code in @uipath/apollo-react (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/apollo-react
1 compromised version
- May 12, 2026
Malicious code in @uipath/apollo-core (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/apollo-core
1 compromised version
- May 12, 2026
Malicious code in @uipath/api-workflow-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/api-workflow-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/ap-chat (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/ap-chat
1 compromised version
- May 12, 2026
Malicious code in @uipath/aops-policy-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/aops-policy-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/agent.sdk (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/agent.sdk
1 compromised version
- May 12, 2026
Malicious code in @uipath/agent-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/agent-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/agent-sdk (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/agent-sdk
1 compromised version
- May 12, 2026
Malicious code in @uipath/admin-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/admin-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/access-policy-tool (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/access-policy-tool
1 compromised version
- May 12, 2026
Malicious code in @uipath/access-policy-sdk (npm)
1 compromised version
- May 12, 2026
Malware in @uipath/access-policy-sdk
1 compromised version
- May 12, 2026
Malicious code in @tolka/cli (npm)
5 compromised versions
- May 12, 2026
Malware in @tolka/cli
1 compromised version
- May 12, 2026
Malicious code in @taskflow-corp/cli (npm)
6 compromised versions
- May 12, 2026
Malware in @taskflow-corp/cli
1 compromised version
- May 12, 2026
Malicious code in @tallyui/theme (npm)
3 compromised versions
- May 12, 2026
Malware in @tallyui/theme
1 compromised version
- May 12, 2026
Malicious code in @tallyui/database (npm)
3 compromised versions
- May 12, 2026
Malware in @tallyui/database
1 compromised version
- May 12, 2026
Malicious code in @tallyui/connector-woocommerce (npm)
3 compromised versions
- May 12, 2026
Malware in @tallyui/connector-woocommerce
1 compromised version
- May 12, 2026
Malicious code in @tallyui/connector-shopify (npm)
3 compromised versions
- May 12, 2026
Malware in @tallyui/connector-shopify
1 compromised version
- May 12, 2026
Malicious code in @tallyui/connector-medusa (npm)
3 compromised versions
- May 12, 2026
Malware in @tallyui/connector-medusa
1 compromised version
- May 12, 2026
Malicious code in @tallyui/components (npm)
3 compromised versions
- May 12, 2026
Malware in @tallyui/components
1 compromised version
Page 109 of 4,804