Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,281 total in npm · sorted newest first- Aug 14, 2025
Malicious code in univision-fe (npm)
- Aug 14, 2025
Malicious code in universe_xoju3_wvkse_xanadu (npm)
- Aug 14, 2025
Malicious code in universe_x8zb5_rw75t_xenon (npm)
- Aug 14, 2025
Malicious code in universe_vrv57_m34zo_nectar (npm)
- Aug 14, 2025
Malicious code in universe_pvms2_b2mkj_oasis (npm)
- Aug 14, 2025
Malicious code in universe_fpvun_7frti_wander (npm)
- Aug 14, 2025
Malicious code in universe_9tkbd_mymx7_quiver (npm)
- Aug 14, 2025
Malicious code in universe_7zsfm_bqdb6_zenith (npm)
- Aug 14, 2025
Malicious code in universe-y8fi3-lsbnj-jewel-project (npm)
- Aug 14, 2025
Malicious code in universe-qelkb-5zh78-xanadu-project (npm)
- Aug 14, 2025
Malicious code in universe-jq5lc-cp1s4-harp-project (npm)
- Aug 14, 2025
Malicious code in universe-eo71k-xfw0g-yonder-project (npm)
- Aug 14, 2025
Malicious code in universe-9iv8u-tr0uo-ember-project (npm)
- Aug 14, 2025
Malicious code in universe-032yv-eyuue-oasis-project (npm)
- Aug 14, 2025
Malicious code in universal-fetch-utils (npm)
- Aug 14, 2025
Malicious code in univ-config (npm)
- Aug 14, 2025
Malicious code in unity_tbctn_8zrdb_breeze (npm)
- Aug 14, 2025
Malicious code in unity_j14fk_yey6b_pinnacle (npm)
- Aug 14, 2025
Malicious code in unity_gxx19_p3kp7_boulder (npm)
- Aug 14, 2025
Malicious code in unity-zs5ii-y5zch-valley-project (npm)
- Aug 14, 2025
Malicious code in unity-ywvl3-quymi-lotus-project (npm)
- Aug 14, 2025
Malicious code in unity-x88q0-gxqx2-lake-project (npm)
- Aug 14, 2025
Malicious code in unity-q3ts6-hznxu-flame-project (npm)
- Aug 14, 2025
Malicious code in unity-k5gm1-30jm7-horizon-project (npm)
- Aug 14, 2025
Malicious code in unity-jubilee-che744-project (npm)
- Aug 14, 2025
Malicious code in unity-ijrqu-fob0s-nebula-project (npm)
- Aug 14, 2025
Malicious code in unity-honey-exq186-project (npm)
- Aug 14, 2025
Malicious code in unity-hhmqh-ulz6q-valley-project (npm)
- Aug 14, 2025
Malicious code in unity-gu82m-y4fq8-xenon-project (npm)
- Aug 14, 2025
Malicious code in unity-g2q7t-0r7ev-jewel-project (npm)
- Aug 14, 2025
Malicious code in unity-aln22-ix8ry-fern-project (npm)
- Aug 14, 2025
Malicious code in unity-9l2u9-9xiv1-fjord-project (npm)
- Aug 14, 2025
Malicious code in unity-3h24g-akbo2-violet-project (npm)
- Aug 14, 2025
Malicious code in unity-2d-youxi-kaifa-jiaocheng (npm)
- Aug 14, 2025
Malicious code in unity-2944b-ttqcp-ripple-project (npm)
- Aug 14, 2025
Malicious code in unity-24x1c-umms4-bison-project (npm)
- Aug 14, 2025
Malicious code in unity-1io3h-sbvbf-wave-project (npm)
- Aug 14, 2025
Malicious code in unitor (npm)
- Aug 14, 2025
Malicious code in uniteapi (npm)
- Aug 14, 2025
Malicious code in uniswap_connect (npm)
- Aug 14, 2025
Malicious code in uniques (npm)
- Aug 14, 2025
Malicious code in unique-now (npm)
- Aug 14, 2025
Malicious code in unipika (npm)
- Aug 14, 2025
Malicious code in unipen (npm)
- Aug 14, 2025
Malicious code in unipedia (npm)
- Aug 14, 2025
Malicious code in uninstall-redis-wormhole-quantumfoam (npm)
- Aug 14, 2025
Malicious code in uninstall-impulse-pino-greatfilter (npm)
- Aug 14, 2025
Malicious code in uninlua (npm)
- Aug 14, 2025
Malicious code in uniform-zucchini-azor (npm)
- Aug 14, 2025
Malicious code in uniform-yfh-project (npm)
Page 5266 of 6,666