Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
333,327 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @diotobtea/recusandae-sint-libero (npm)
- Aug 14, 2025
Malicious code in @diotobtea/recusandae-ipsa-quasi (npm)
- Aug 14, 2025
Malicious code in @diotobtea/quisquam-labore (npm)
- Aug 14, 2025
Malicious code in @diotobtea/quia-modi-doloribus (npm)
- Aug 14, 2025
Malicious code in @diotobtea/quia-excepturi (npm)
- Aug 14, 2025
Malicious code in @diotobtea/quaerat-optio-qui-totam (npm)
- Aug 14, 2025
Malicious code in @diotobtea/occaecati-qui-commodi-ea (npm)
- Aug 14, 2025
Malicious code in @diotobtea/nemo-nihil-aut (npm)
- Aug 14, 2025
Malicious code in @diotobtea/natus-expedita (npm)
- Aug 14, 2025
Malicious code in @diotobtea/nam-vitae-qui (npm)
- Aug 14, 2025
Malicious code in @diotobtea/nam-debitis-alias (npm)
- Aug 14, 2025
Malicious code in @diotobtea/minima-alias-velit (npm)
- Aug 14, 2025
Malicious code in @diotobtea/maxime-quod-cum (npm)
- Aug 14, 2025
Malicious code in @diotobtea/maxime-beatae (npm)
- Aug 14, 2025
Malicious code in @diotobtea/laboriosam-esse-eaque (npm)
- Aug 14, 2025
Malicious code in @diotobtea/labore-odio (npm)
- Aug 14, 2025
Malicious code in @diotobtea/iusto-eos-error (npm)
- Aug 14, 2025
Malicious code in @diotobtea/illo-quod-quidem (npm)
- Aug 14, 2025
Malicious code in @diotobtea/explicabo-iste-labore-assumenda (npm)
- Aug 14, 2025
Malicious code in @diotobtea/eveniet-eveniet-dolorum-quaerat (npm)
- Aug 14, 2025
Malicious code in @diotobtea/eum-tempore-nihil (npm)
- Aug 14, 2025
Malicious code in @diotobtea/et-dolorum-eos (npm)
- Aug 14, 2025
Malicious code in @diotobtea/esse-facere-nam (npm)
- Aug 14, 2025
Malicious code in @diotobtea/enim-aspernatur-inventore-autem (npm)
- Aug 14, 2025
Malicious code in @diotobtea/eius-explicabo-delectus-voluptatem (npm)
- Aug 14, 2025
Malicious code in @diotobtea/eius-a-distinctio (npm)
- Aug 14, 2025
Malicious code in @diotobtea/dolorum-optio-neque (npm)
- Aug 14, 2025
Malicious code in @diotobtea/doloribus-quibusdam-sapiente (npm)
- Aug 14, 2025
Malicious code in @diotobtea/doloribus-magnam (npm)
- Aug 14, 2025
Malicious code in @diotobtea/doloremque-quas (npm)
- Aug 14, 2025
Malicious code in @diotobtea/dolor-aliquid-nesciunt (npm)
- Aug 14, 2025
Malicious code in @diotobtea/dicta-quas-soluta-placeat (npm)
- Aug 14, 2025
Malicious code in @diotobtea/debitis-quo-itaque (npm)
- Aug 14, 2025
Malicious code in @diotobtea/corrupti-quos-neque-dolores (npm)
- Aug 14, 2025
Malicious code in @diotobtea/corrupti-eum-doloremque (npm)
- Aug 14, 2025
Malicious code in @diotobtea/consequuntur-porro-incidunt-nobis (npm)
- Aug 14, 2025
Malicious code in @diotobtea/beatae-eligendi-ratione-suscipit (npm)
- Aug 14, 2025
Malicious code in @diotobtea/aut-beatae-molestiae-ipsum (npm)
- Aug 14, 2025
Malicious code in @diotobtea/at-dicta-ullam (npm)
- Aug 14, 2025
Malicious code in @diotobtea/assumenda-ut-eaque (npm)
- Aug 14, 2025
Malicious code in @diotobtea/architecto-ipsam-iusto (npm)
- Aug 14, 2025
Malicious code in @diotobtea/amet-tempora-nihil (npm)
- Aug 14, 2025
Malicious code in @diotobtea/aliquam-perferendis-dolores (npm)
- Aug 14, 2025
Malicious code in @diotobtea/alias-nostrum-ipsam (npm)
- Aug 14, 2025
Malicious code in @diotobtea/ad-error-accusantium (npm)
- Aug 14, 2025
Malicious code in @digital-wealth-web/cwp-service-setup (npm)
- Aug 14, 2025
Malicious code in @digital-wealth-web/cwp-service-setu (npm)
- Aug 14, 2025
Malicious code in @dashboard-experience/react-flagr (npm)
- Aug 14, 2025
Malicious code in @ctra/utils (npm)
1 compromised version
- Aug 14, 2025
Malicious code in @csid-na/imc3-components (npm)
Page 5183 of 6,667