Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,281 total in npm · sorted newest first- Aug 14, 2025
Malicious code in uplift-aura-rjp533-project (npm)
- Aug 14, 2025
Malicious code in uplift-78f1z-u3vu9-yew-project (npm)
- Aug 14, 2025
Malicious code in uplift-20d6t-y47zq-grove-project (npm)
- Aug 14, 2025
Malicious code in uphykwxtsmiqfzga (npm)
- Aug 14, 2025
Malicious code in upgrow (npm)
- Aug 14, 2025
Malicious code in upgrade-proxima-epimetheus-draco (npm)
- Aug 14, 2025
Malicious code in upgrade-inflation-electron-builder-outercore (npm)
- Aug 14, 2025
Malicious code in upgrade-global-hydrogeology-dotenv-safe (npm)
- Aug 14, 2025
Malicious code in updatewp (npm)
- Aug 14, 2025
Malicious code in updated-tricks-v-bucks-generator-free_2023-bbi7zrezw (npm)
- Aug 14, 2025
Malicious code in updated-tricks-v-bucks-generator-free_2023-08ivy7m1f (npm)
- Aug 14, 2025
Malicious code in updated-tricks-robux-generator-free_2023-ss1nujjg-pba (npm)
- Aug 14, 2025
Malicious code in updated-tricks-robux-generator-free_2023-ss1nujjg-ftr (npm)
- Aug 14, 2025
Malicious code in updated-tricks-roblox-robux-generator-2023-get-verify_wrhzdu (npm)
- Aug 14, 2025
Malicious code in updated-coin-master-free-spins-daily-2023-dkzkd (npm)
- Aug 14, 2025
Malicious code in updated-asphalt-9-legends-tokens-generator (npm)
- Aug 14, 2025
Malicious code in updated-ark-survival-ancient-amber-generator (npm)
- Aug 14, 2025
Malicious code in update-venus-ignite-bioinformatics (npm)
- Aug 14, 2025
Malicious code in update-terser-webpack-plugin-stratigraphy-release-it (npm)
- Aug 14, 2025
Malicious code in update-phoenix-lithosphere-coronalmassejection (npm)
- Aug 14, 2025
Malicious code in update-native-lepton-init (npm)
- Aug 14, 2025
Malicious code in update-hexo-epigenetics-geomorphology (npm)
- Aug 14, 2025
Malicious code in up-tsu (npm)
- Aug 14, 2025
Malicious code in uowbio (npm)
- Aug 14, 2025
Malicious code in uonrails (npm)
- Aug 14, 2025
Malicious code in uolpainelcloud-painelcloud-host-uol-com-br (npm)
- Aug 14, 2025
Malicious code in uokfntjwxlbpavgq (npm)
- Aug 14, 2025
Malicious code in uoiglkfebvhtwpxm (npm)
- Aug 14, 2025
Malicious code in uohmqkewgpikdrts (npm)
- Aug 14, 2025
Malicious code in unxsisp (npm)
- Aug 14, 2025
Malicious code in unuk-sagitta-canopus-dotenv-safe (npm)
- Aug 14, 2025
Malicious code in unuk-quantum-loopback-got (npm)
- Aug 14, 2025
Malicious code in unuk-phenomic-playwright-webdriverio (npm)
- Aug 14, 2025
Malicious code in unuk-morgan-mini-css-extract-plugin-sync (npm)
- Aug 14, 2025
Malicious code in unuk-mesosphere-phoebe-blitz (npm)
- Aug 14, 2025
Malicious code in unuk-draco-indus-decoherence (npm)
- Aug 14, 2025
Malicious code in unsplash-it-download (npm)
- Aug 14, 2025
Malicious code in unsize (npm)
- Aug 14, 2025
Malicious code in unscoped-test1 (npm)
- Aug 14, 2025
Malicious code in unpdeliveryserv (npm)
- Aug 14, 2025
Malicious code in unobsfajqdcptkkm (npm)
- Aug 14, 2025
Malicious code in unnoobme (npm)
- Aug 14, 2025
Malicious code in unmozarva (npm)
- Aug 14, 2025
Malicious code in unlocks (npm)
- Aug 14, 2025
Malicious code in unlocking (npm)
- Aug 14, 2025
Malicious code in unlimited-fortnite-vbucks-march-2023-dkzszd (npm)
- Aug 14, 2025
Malicious code in unixoid (npm)
- Aug 14, 2025
Malicious code in unix-visualize-stub-file-big (npm)
- Aug 14, 2025
Malicious code in unix-promise-final-grid-old (npm)
- Aug 14, 2025
Malicious code in univision-fe-componets-base (npm)
Page 5265 of 6,666