Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,466 total · sorted newest first- Aug 14, 2025
Malicious code in update-terser-webpack-plugin-stratigraphy-release-it (npm)
- Aug 14, 2025
Malicious code in update-phoenix-lithosphere-coronalmassejection (npm)
- Aug 14, 2025
Malicious code in update-native-lepton-init (npm)
- Aug 14, 2025
Malicious code in update-hexo-epigenetics-geomorphology (npm)
- Aug 14, 2025
Malicious code in up-tsu (npm)
- Aug 14, 2025
Malicious code in uowbio (npm)
- Aug 14, 2025
Malicious code in uonrails (npm)
- Aug 14, 2025
Malicious code in uolpainelcloud-painelcloud-host-uol-com-br (npm)
- Aug 14, 2025
Malicious code in uokfntjwxlbpavgq (npm)
- Aug 14, 2025
Malicious code in uoiglkfebvhtwpxm (npm)
- Aug 14, 2025
Malicious code in uohmqkewgpikdrts (npm)
- Aug 14, 2025
Malicious code in unxsisp (npm)
- Aug 14, 2025
Malicious code in unuk-sagitta-canopus-dotenv-safe (npm)
- Aug 14, 2025
Malicious code in unuk-quantum-loopback-got (npm)
- Aug 14, 2025
Malicious code in unuk-phenomic-playwright-webdriverio (npm)
- Aug 14, 2025
Malicious code in unuk-morgan-mini-css-extract-plugin-sync (npm)
- Aug 14, 2025
Malicious code in unuk-mesosphere-phoebe-blitz (npm)
- Aug 14, 2025
Malicious code in unuk-draco-indus-decoherence (npm)
- Aug 14, 2025
Malicious code in unsplash-it-download (npm)
- Aug 14, 2025
Malicious code in unsize (npm)
- Aug 14, 2025
Malicious code in unscoped-test1 (npm)
- Aug 14, 2025
Malicious code in unpdeliveryserv (npm)
- Aug 14, 2025
Malicious code in unobsfajqdcptkkm (npm)
- Aug 14, 2025
Malicious code in unnoobme (npm)
- Aug 14, 2025
Malicious code in unmozarva (npm)
- Aug 14, 2025
Malicious code in unlocks (npm)
- Aug 14, 2025
Malicious code in unlocking (npm)
- Aug 14, 2025
Malicious code in unlimited-fortnite-vbucks-march-2023-dkzszd (npm)
- Aug 14, 2025
Malicious code in unixoid (npm)
- Aug 14, 2025
Malicious code in unix-visualize-stub-file-big (npm)
- Aug 14, 2025
Malicious code in unix-promise-final-grid-old (npm)
- Aug 14, 2025
Malicious code in univision-fe-componets-base (npm)
- Aug 14, 2025
Malicious code in univision-fe (npm)
- Aug 14, 2025
Malicious code in universe_xoju3_wvkse_xanadu (npm)
- Aug 14, 2025
Malicious code in universe_x8zb5_rw75t_xenon (npm)
- Aug 14, 2025
Malicious code in universe_vrv57_m34zo_nectar (npm)
- Aug 14, 2025
Malicious code in universe_pvms2_b2mkj_oasis (npm)
- Aug 14, 2025
Malicious code in universe_fpvun_7frti_wander (npm)
- Aug 14, 2025
Malicious code in universe_9tkbd_mymx7_quiver (npm)
- Aug 14, 2025
Malicious code in universe_7zsfm_bqdb6_zenith (npm)
- Aug 14, 2025
Malicious code in universe-y8fi3-lsbnj-jewel-project (npm)
- Aug 14, 2025
Malicious code in universe-qelkb-5zh78-xanadu-project (npm)
- Aug 14, 2025
Malicious code in universe-jq5lc-cp1s4-harp-project (npm)
- Aug 14, 2025
Malicious code in universe-eo71k-xfw0g-yonder-project (npm)
- Aug 14, 2025
Malicious code in universe-9iv8u-tr0uo-ember-project (npm)
- Aug 14, 2025
Malicious code in universe-032yv-eyuue-oasis-project (npm)
- Aug 14, 2025
Malicious code in universal-fetch-utils (npm)
- Aug 14, 2025
Malicious code in univ-config (npm)
- Aug 14, 2025
Malicious code in unity_tbctn_8zrdb_breeze (npm)
- Aug 14, 2025
Malicious code in unity_j14fk_yey6b_pinnacle (npm)
Page 5700 of 7,330