Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
366,438 total · sorted newest first- Aug 14, 2025
Malicious code in ul_portal_components (npm)
- Aug 14, 2025
Malicious code in ukuleled (npm)
- Aug 14, 2025
Malicious code in uktoigyvxpldwhrf (npm)
- Aug 14, 2025
Malicious code in ukit (npm)
- Aug 14, 2025
Malicious code in ukerng (npm)
- Aug 14, 2025
Malicious code in ukcasino (npm)
- Aug 14, 2025
Malicious code in ujet-processor-manager (npm)
- Aug 14, 2025
Malicious code in uj8ez1 (npm)
- Aug 14, 2025
Malicious code in uitstock (npm)
- Aug 14, 2025
Malicious code in uitleen (npm)
- Aug 14, 2025
Malicious code in uisomaker (npm)
- Aug 14, 2025
Malicious code in uintbn-validator (npm)
3 compromised versions
- Aug 14, 2025
Malicious code in uinsport (npm)
- Aug 14, 2025
Malicious code in uim-web-sdk (npm)
- Aug 14, 2025
Malicious code in uiknvqelzogpkdxh (npm)
- Aug 14, 2025
Malicious code in uikl (npm)
- Aug 14, 2025
Malicious code in uidk-ng-1x-translation (npm)
- Aug 14, 2025
Malicious code in ui_test_automation (npm)
- Aug 14, 2025
Malicious code in ui_client (npm)
- Aug 14, 2025
Malicious code in ui_assets (npm)
- Aug 14, 2025
Malicious code in ui5-mobx-state-tree (npm)
- Aug 14, 2025
Malicious code in ui-testing (npm)
- Aug 14, 2025
Malicious code in ui-select-infinity-master (npm)
- Aug 14, 2025
Malicious code in ui-scrollfix (npm)
- Aug 14, 2025
Malicious code in ui-ngx-i18 (npm)
- Aug 14, 2025
Malicious code in ui-lightning-components (npm)
- Aug 14, 2025
Malicious code in ui-fields (npm)
- Aug 14, 2025
Malicious code in ui-extensions-react (npm)
- Aug 14, 2025
Malicious code in ui-extensions-internal-test (npm)
- Aug 14, 2025
Malicious code in ui-advert-manager (npm)
- Aug 14, 2025
Malicious code in ui-ad-marketplace (npm)
- Aug 14, 2025
Malicious code in uherbst (npm)
- Aug 14, 2025
Malicious code in uglyfi.js (npm)
- Aug 14, 2025
Malicious code in uglyfi-js (npm)
- Aug 14, 2025
Malicious code in uglifying (npm)
- Aug 14, 2025
Malicious code in uglify-validate-daemon-emulate-module (npm)
- Aug 14, 2025
Malicious code in uglify-js-pipe-transform-lightyear (npm)
- Aug 14, 2025
Malicious code in uglify-js-paleomagnetism-saturnology-xenobiology (npm)
- Aug 14, 2025
Malicious code in uglify-js-lint-cosmochemistry-publish (npm)
- Aug 14, 2025
Malicious code in uglify-js-google-rimraf-panspermia (npm)
- Aug 14, 2025
Malicious code in uglify-debug-key-query-refactor (npm)
- Aug 14, 2025
Malicious code in ugli-zulu-swzb (npm)
- Aug 14, 2025
Malicious code in ugli-zucchini-sjmk (npm)
- Aug 14, 2025
Malicious code in ugli-zest-7w3p (npm)
- Aug 14, 2025
Malicious code in ugli-z8f-project (npm)
- Aug 14, 2025
Malicious code in ugli-yankee-riay (npm)
- Aug 14, 2025
Malicious code in ugli-yankee-banana-tarkw (npm)
- Aug 14, 2025
Malicious code in ugli-xys-project (npm)
- Aug 14, 2025
Malicious code in ugli-xray-golf-yhenj (npm)
- Aug 14, 2025
Malicious code in ugli-xigua-grape-ivufx (npm)
Page 5705 of 7,329