Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,281 total in npm · sorted newest first- Aug 14, 2025
Malicious code in unicorn_t8yw4_0srk2_vista (npm)
- Aug 14, 2025
Malicious code in unicorn_adventure (npm)
- Aug 14, 2025
Malicious code in unicorn-zenith-jmw648-project (npm)
- Aug 14, 2025
Malicious code in unicorn-yard-wgs627-project (npm)
- Aug 14, 2025
Malicious code in unicorn-vkmpt-b5mk4-frost-project (npm)
- Aug 14, 2025
Malicious code in unicorn-violet-xdm536-project (npm)
- Aug 14, 2025
Malicious code in unicorn-v3sgp-gsyhr-radiance-project (npm)
- Aug 14, 2025
Malicious code in unicorn-shopify (npm)
- Aug 14, 2025
Malicious code in unicorn-reef-loj057-project (npm)
- Aug 14, 2025
Malicious code in unicorn-penguin-lmi414-project (npm)
- Aug 14, 2025
Malicious code in unicorn-pebble-ayr018-project (npm)
- Aug 14, 2025
Malicious code in unicorn-paradise-nfu113-project (npm)
- Aug 14, 2025
Malicious code in unicorn-mangrove-vnw978-project (npm)
- Aug 14, 2025
Malicious code in unicorn-fjjjr-evjto-harmony-project (npm)
- Aug 14, 2025
Malicious code in unicorn-falcon-lwt424-project (npm)
- Aug 14, 2025
Malicious code in unicorn-emerald-pfz705-project (npm)
- Aug 14, 2025
Malicious code in unicorn-cloud-vvv674-project (npm)
- Aug 14, 2025
Malicious code in unicorn-boulder-quw837-project (npm)
- Aug 14, 2025
Malicious code in unicorn-bisda-9270v-zen-project (npm)
- Aug 14, 2025
Malicious code in unicorn-5o0wt-dbtzy-terra-project (npm)
- Aug 14, 2025
Malicious code in unicorn-5exuw-uq4h2-serenity-project (npm)
- Aug 14, 2025
Malicious code in unicorefx (npm)
- Aug 14, 2025
Malicious code in unicloak (npm)
- Aug 14, 2025
Malicious code in uniceq (npm)
- Aug 14, 2025
Malicious code in unicache (npm)
- Aug 14, 2025
Malicious code in uni-help (npm)
- Aug 14, 2025
Malicious code in unfancy (npm)
- Aug 14, 2025
Malicious code in undream-analytics (npm)
- Aug 14, 2025
Malicious code in undesrcore (npm)
- Aug 14, 2025
Malicious code in underworld_tbrgd_e1bcj_rainbow (npm)
- Aug 14, 2025
Malicious code in underworld_oul9b_c3gjb_obsidian (npm)
- Aug 14, 2025
Malicious code in underworld_kcc65_yujx4_yacht (npm)
- Aug 14, 2025
Malicious code in underworld_i9kj5_74zgc_ultraviolet (npm)
- Aug 14, 2025
Malicious code in underworld_chsls_81ly2_ember (npm)
- Aug 14, 2025
Malicious code in underworld_6n0gq_tkm5m_iris (npm)
- Aug 14, 2025
Malicious code in underworld_5fnj1_fldh0_lullaby (npm)
- Aug 14, 2025
Malicious code in undertow_ma5vr_hp1fp_iris (npm)
- Aug 14, 2025
Malicious code in undertow_fpe5b_glub1_verdant (npm)
- Aug 14, 2025
Malicious code in undertow-violet-eyd299-project (npm)
- Aug 14, 2025
Malicious code in undertow-umbrella-scu465-project (npm)
- Aug 14, 2025
Malicious code in undertow-tornado-hee230-project (npm)
- Aug 14, 2025
Malicious code in undertow-mangrove-sye608-project (npm)
- Aug 14, 2025
Malicious code in undertow-honeycomb-peb878-project (npm)
- Aug 14, 2025
Malicious code in undertow-falcon-dbg379-project (npm)
- Aug 14, 2025
Malicious code in undertow-amber-tpr741-project (npm)
- Aug 14, 2025
Malicious code in understory-editor (npm)
- Aug 14, 2025
Malicious code in underscroe (npm)
- Aug 14, 2025
Malicious code in underpass-yearling-hgvn (npm)
- Aug 14, 2025
Malicious code in underpass-tangerine-p4lt (npm)
- Aug 14, 2025
Malicious code in underpass-supernova-76yr (npm)
Page 5268 of 6,666