Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,281 total in npm · sorted newest first- Aug 14, 2025
Malicious code in ug-no-deps (npm)
- Aug 14, 2025
Malicious code in ug-deep-alt (npm)
- Aug 14, 2025
Malicious code in ug-deep (npm)
- Aug 14, 2025
Malicious code in ufocms (npm)
- Aug 14, 2025
Malicious code in ufniqelroxpkzgba (npm)
- Aug 14, 2025
Malicious code in uexwheel (npm)
- Aug 14, 2025
Malicious code in uetyxlivgokhdpwz (npm)
- Aug 14, 2025
Malicious code in uetjikmzbodrwshg (npm)
- Aug 14, 2025
Malicious code in uerkcwogmtpnkjxd (npm)
- Aug 14, 2025
Malicious code in uejtlwfgpsacqbahvnepagfam1iw10sl (npm)
- Aug 14, 2025
Malicious code in uebungen (npm)
- Aug 14, 2025
Malicious code in ue4-lantu-keshihua-jiaoben-rumen-shouce (npm)
- Aug 14, 2025
Malicious code in ue-youxi-kaifa-xiangmu (npm)
- Aug 14, 2025
Malicious code in udzura (npm)
- Aug 14, 2025
Malicious code in udptap (npm)
- Aug 14, 2025
Malicious code in udplogger (npm)
- Aug 14, 2025
Malicious code in udon-orange-wgjs (npm)
- Aug 14, 2025
Malicious code in udon-oak-y7wk (npm)
- Aug 14, 2025
Malicious code in udon-airplane-a3m0 (npm)
- Aug 14, 2025
Malicious code in udnqoevipgblwhky (npm)
- Aug 14, 2025
Malicious code in udin-telurtahu61-sukiwir (npm)
- Aug 14, 2025
Malicious code in udin-rangi40-breki (npm)
- Aug 14, 2025
Malicious code in udin-ketan100-breki (npm)
- Aug 14, 2025
Malicious code in udin-keraktelor34-sukiwir (npm)
- Aug 14, 2025
Malicious code in udemytestframework (npm)
- Aug 14, 2025
Malicious code in udemyblog (npm)
- Aug 14, 2025
Malicious code in udacxvniespwfkqz (npm)
- Aug 14, 2025
Malicious code in ud-extension (npm)
- Aug 14, 2025
Malicious code in ucwitlorgjqabzvn (npm)
- Aug 14, 2025
Malicious code in ucoreos (npm)
- Aug 14, 2025
Malicious code in uclasrc (npm)
- Aug 14, 2025
Malicious code in uclagl (npm)
- Aug 14, 2025
Malicious code in ucifsplus (npm)
- Aug 14, 2025
Malicious code in ucfgskwipkamjexq (npm)
- Aug 14, 2025
Malicious code in ucasort (npm)
- Aug 14, 2025
Malicious code in ubukey (npm)
- Aug 14, 2025
Malicious code in ubtwonrkjxzmqlei (npm)
- Aug 14, 2025
Malicious code in ubinote (npm)
- Aug 14, 2025
Malicious code in uberpov (npm)
- Aug 14, 2025
Malicious code in uberdots (npm)
- Aug 14, 2025
Malicious code in uber-purify (npm)
- Aug 14, 2025
Malicious code in ub-banksy (npm)
- Aug 14, 2025
Malicious code in uasuml (npm)
- Aug 14, 2025
Malicious code in uamqmo (npm)
- Aug 14, 2025
Malicious code in ua-grid (npm)
- Aug 14, 2025
Malicious code in tzpemvkuflnygdso (npm)
- Aug 14, 2025
Malicious code in tzf-darwin-x64 (npm)
- Aug 14, 2025
Malicious code in tzeos-sdk (npm)
- Aug 14, 2025
Malicious code in tzdata-finance (npm)
- Aug 14, 2025
Malicious code in tyuxftg (npm)
Page 5273 of 6,666