Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,281 total in npm · sorted newest first- Aug 14, 2025
Malicious code in ugli-ubo-project (npm)
- Aug 14, 2025
Malicious code in ugli-ts8-project (npm)
- Aug 14, 2025
Malicious code in ugli-tangerine-qvwg (npm)
- Aug 14, 2025
Malicious code in ugli-tangerine-audd (npm)
- Aug 14, 2025
Malicious code in ugli-t1f-project (npm)
- Aug 14, 2025
Malicious code in ugli-smy-project (npm)
- Aug 14, 2025
Malicious code in ugli-rs4-project (npm)
- Aug 14, 2025
Malicious code in ugli-romeo-lisa (npm)
- Aug 14, 2025
Malicious code in ugli-papaya-xigua-mxzjp (npm)
- Aug 14, 2025
Malicious code in ugli-orange-kiwi-znnve (npm)
- Aug 14, 2025
Malicious code in ugli-oev-project (npm)
- Aug 14, 2025
Malicious code in ugli-nzj-project (npm)
- Aug 14, 2025
Malicious code in ugli-nkf-project (npm)
- Aug 14, 2025
Malicious code in ugli-nectarine-apple-eswfe (npm)
- Aug 14, 2025
Malicious code in ugli-n8h-project (npm)
- Aug 14, 2025
Malicious code in ugli-mike-kilo-yvlls (npm)
- Aug 14, 2025
Malicious code in ugli-kilo-banana-igdav (npm)
- Aug 14, 2025
Malicious code in ugli-juliet-echo-gtonq (npm)
- Aug 14, 2025
Malicious code in ugli-jir-project (npm)
- Aug 14, 2025
Malicious code in ugli-ivy-uio6 (npm)
- Aug 14, 2025
Malicious code in ugli-ivy-gndg (npm)
- Aug 14, 2025
Malicious code in ugli-india-mike-hmqla (npm)
- Aug 14, 2025
Malicious code in ugli-ien-project (npm)
- Aug 14, 2025
Malicious code in ugli-hotel-november-flssy (npm)
- Aug 14, 2025
Malicious code in ugli-hotel-mhoh (npm)
- Aug 14, 2025
Malicious code in ugli-foxtrot-urni (npm)
- Aug 14, 2025
Malicious code in ugli-fig-xxhq (npm)
- Aug 14, 2025
Malicious code in ugli-fig-xtvi (npm)
- Aug 14, 2025
Malicious code in ugli-fig-mexa (npm)
- Aug 14, 2025
Malicious code in ugli-elderberry-xray-llleu (npm)
- Aug 14, 2025
Malicious code in ugli-echo-hate (npm)
- Aug 14, 2025
Malicious code in ugli-det-project (npm)
- Aug 14, 2025
Malicious code in ugli-delta-zzvx (npm)
- Aug 14, 2025
Malicious code in ugli-delta-charlie-yuiof (npm)
- Aug 14, 2025
Malicious code in ugli-d69-project (npm)
- Aug 14, 2025
Malicious code in ugli-cuf-project (npm)
- Aug 14, 2025
Malicious code in ugli-cjx-project (npm)
- Aug 14, 2025
Malicious code in ugli-bt4-project (npm)
- Aug 14, 2025
Malicious code in ugli-bsj-project (npm)
- Aug 14, 2025
Malicious code in ugli-bgw-project (npm)
- Aug 14, 2025
Malicious code in ugli-alpha-utru (npm)
- Aug 14, 2025
Malicious code in ugli-886-project (npm)
- Aug 14, 2025
Malicious code in ugli-7hv-project (npm)
- Aug 14, 2025
Malicious code in ugli-3x5-project (npm)
- Aug 14, 2025
Malicious code in ugli-2n2-project (npm)
- Aug 14, 2025
Malicious code in ugli-11m-project (npm)
- Aug 14, 2025
Malicious code in ugli-0d8-project (npm)
- Aug 14, 2025
Malicious code in ugconnect (npm)
- Aug 14, 2025
Malicious code in ugather (npm)
- Aug 14, 2025
Malicious code in ugaicpc (npm)
Page 5272 of 6,666