Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,281 total in npm · sorted newest first- Aug 14, 2025
Malicious code in uniform-yankee-cjzu (npm)
- Aug 14, 2025
Malicious code in uniform-xray-xrql (npm)
- Aug 14, 2025
Malicious code in uniform-wr0-project (npm)
- Aug 14, 2025
Malicious code in uniform-whiskey-sierra-bwjgd (npm)
- Aug 14, 2025
Malicious code in uniform-whiskey-giaw (npm)
- Aug 14, 2025
Malicious code in uniform-watermelon-ycxh (npm)
- Aug 14, 2025
Malicious code in uniform-victor-katx (npm)
- Aug 14, 2025
Malicious code in uniform-uyh-project (npm)
- Aug 14, 2025
Malicious code in uniform-ugli-ojjn (npm)
- Aug 14, 2025
Malicious code in uniform-tango-orange-sodsf (npm)
- Aug 14, 2025
Malicious code in uniform-tangerine-nzyi (npm)
- Aug 14, 2025
Malicious code in uniform-strawberry-vkkc (npm)
- Aug 14, 2025
Malicious code in uniform-ssj-project (npm)
- Aug 14, 2025
Malicious code in uniform-shack-gm92 (npm)
- Aug 14, 2025
Malicious code in uniform-s5i-project (npm)
- Aug 14, 2025
Malicious code in uniform-rmt-project (npm)
- Aug 14, 2025
Malicious code in uniform-raspberry-kilo-dgnyy (npm)
- Aug 14, 2025
Malicious code in uniform-quebec-iuua (npm)
- Aug 14, 2025
Malicious code in uniform-qgv-project (npm)
- Aug 14, 2025
Malicious code in uniform-papa-grape-pkmiq (npm)
- Aug 14, 2025
Malicious code in uniform-o87-project (npm)
- Aug 14, 2025
Malicious code in uniform-november-bravo-uxdix (npm)
- Aug 14, 2025
Malicious code in uniform-mike-hpvp (npm)
- Aug 14, 2025
Malicious code in uniform-lunar-1zo3 (npm)
- Aug 14, 2025
Malicious code in uniform-lima-mango-ovmhh (npm)
- Aug 14, 2025
Malicious code in uniform-lemon-date-jioqc (npm)
- Aug 14, 2025
Malicious code in uniform-kiwi-tnjc (npm)
- Aug 14, 2025
Malicious code in uniform-imk-project (npm)
- Aug 14, 2025
Malicious code in uniform-iceberg-scqf (npm)
- Aug 14, 2025
Malicious code in uniform-gzv-project (npm)
- Aug 14, 2025
Malicious code in uniform-gub-project (npm)
- Aug 14, 2025
Malicious code in uniform-grape-botd (npm)
- Aug 14, 2025
Malicious code in uniform-elephant-paz4 (npm)
- Aug 14, 2025
Malicious code in uniform-echo-mooj (npm)
- Aug 14, 2025
Malicious code in uniform-dwarf-ckiz (npm)
- Aug 14, 2025
Malicious code in uniform-dvc-project (npm)
- Aug 14, 2025
Malicious code in uniform-delta-sqvm (npm)
- Aug 14, 2025
Malicious code in uniform-date-hotel-websn (npm)
- Aug 14, 2025
Malicious code in uniform-cqz-project (npm)
- Aug 14, 2025
Malicious code in uniform-cherry-ukvf (npm)
- Aug 14, 2025
Malicious code in uniform-charlie-delta-xryel (npm)
- Aug 14, 2025
Malicious code in uniform-bravo-july (npm)
- Aug 14, 2025
Malicious code in uniform-alpha-aqdn (npm)
- Aug 14, 2025
Malicious code in uniform-alb-project (npm)
- Aug 14, 2025
Malicious code in uniform-9oj-project (npm)
- Aug 14, 2025
Malicious code in uniform-5uv-project (npm)
- Aug 14, 2025
Malicious code in uniform-4uz-project (npm)
- Aug 14, 2025
Malicious code in unifiedverfserv (npm)
- Aug 14, 2025
Malicious code in unified-shell-bootstrapper (npm)
- Aug 14, 2025
Malicious code in unicorn_wcjfm_qtclh_echo (npm)
Page 5267 of 6,666