Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,281 total in npm · sorted newest first- Aug 14, 2025
Malicious code in uwebsocket.js (npm)
- Aug 14, 2025
Malicious code in uw-service-customer-services (npm)
- Aug 14, 2025
Malicious code in uvershare (npm)
- Aug 14, 2025
Malicious code in uudaao (npm)
- Aug 14, 2025
Malicious code in uubwemwubna (npm)
- Aug 14, 2025
Malicious code in utopia_vdu25_hbbct_molecule (npm)
- Aug 14, 2025
Malicious code in utopia_g2xyt_xs6kx_ocean (npm)
- Aug 14, 2025
Malicious code in utopia_ajrt6_1ydi1_evoke (npm)
- Aug 14, 2025
Malicious code in utopia_511bp_txam9_glacier (npm)
- Aug 14, 2025
Malicious code in utopia-zeppelin-rrh334-project (npm)
- Aug 14, 2025
Malicious code in utopia-yeti-nsy568-project (npm)
- Aug 14, 2025
Malicious code in utopia-xsfk1-dzo1c-quicksilver-project (npm)
- Aug 14, 2025
Malicious code in utopia-vine-ifh536-project (npm)
- Aug 14, 2025
Malicious code in utopia-quill-ceq017-project (npm)
- Aug 14, 2025
Malicious code in utopia-pinnacle-saj489-project (npm)
- Aug 14, 2025
Malicious code in utopia-orangutan-nxd776-project (npm)
- Aug 14, 2025
Malicious code in utopia-mountain-jxk425-project (npm)
- Aug 14, 2025
Malicious code in utopia-mist-ppd028-project (npm)
- Aug 14, 2025
Malicious code in utopia-icicle-cuq715-project (npm)
- Aug 14, 2025
Malicious code in utopia-fyau4-yfe3v-glacier-project (npm)
- Aug 14, 2025
Malicious code in utopia-forest-lgs840-project (npm)
- Aug 14, 2025
Malicious code in utopia-fbdkw-raxw7-zephyr-project (npm)
- Aug 14, 2025
Malicious code in utopia-ecosystem-csh952-project (npm)
- Aug 14, 2025
Malicious code in utopia-delta-uig594-project (npm)
- Aug 14, 2025
Malicious code in utopia-aspen-sew316-project (npm)
- Aug 14, 2025
Malicious code in utomo-tahutek88-breki (npm)
- Aug 14, 2025
Malicious code in utomo-sasag26-sukiwir (npm)
- Aug 14, 2025
Malicious code in utomo-otak-otak68-sukiwir (npm)
- Aug 14, 2025
Malicious code in utomo-mangga41-sukiwir (npm)
- Aug 14, 2025
Malicious code in utomo-liwet89-breki (npm)
- Aug 14, 2025
Malicious code in utomo-klentik25-sukiwir (npm)
- Aug 14, 2025
Malicious code in utomo-keripik86-breki (npm)
- Aug 14, 2025
Malicious code in utomo-keripik5-sukiwir (npm)
- Aug 14, 2025
Malicious code in utinypass (npm)
- Aug 14, 2025
Malicious code in utils-joongo (npm)
- Aug 14, 2025
Malicious code in utilioep (npm)
1 compromised version
- Aug 14, 2025
Malicious code in utfconv (npm)
- Aug 14, 2025
Malicious code in utdeftvs (npm)
- Aug 14, 2025
Malicious code in utbchance (npm)
- Aug 14, 2025
Malicious code in utavee (npm)
- Aug 14, 2025
Malicious code in uswds-gulp (npm)
- Aug 14, 2025
Malicious code in ustack (npm)
- Aug 14, 2025
Malicious code in uspxyz (npm)
- Aug 14, 2025
Malicious code in uspersona (npm)
- Aug 14, 2025
Malicious code in usersv (npm)
- Aug 14, 2025
Malicious code in userread-paypal (npm)
- Aug 14, 2025
Malicious code in userplatformserv (npm)
- Aug 14, 2025
Malicious code in userlifecycle-paypal (npm)
- Aug 14, 2025
Malicious code in userbook (npm)
- Aug 14, 2025
Malicious code in useraccesscontrol-paypal (npm)
Page 5263 of 6,666