Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,288 total in npm · sorted newest first- Sep 2, 2024
Malware in @diotoborg/sit-et-quibusdam
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/aliquam-aperiam
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/officiis-optio
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quo-dolorem-ducimus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/voluptatum-veritatis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/molestiae-perferendis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/nihil-praesentium
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/illo-quos
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/excepturi-deserunt-eaque
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/rem-minima
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/eum-porro
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/omnis-explicabo
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/libero-ratione-delectus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/iusto-blanditiis-reiciendis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/vero-quaerat
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/ipsam-dolores-labore
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/est-ad
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/ad-tenetur-eveniet
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/facere-nihil
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quis-placeat
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/distinctio-voluptates-deleniti
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/laboriosam-in-nostrum
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/aliquam-commodi-ducimus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/voluptate-fuga
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/soluta-cupiditate-nobis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/provident-enim-animi
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/adipisci-esse-tempore
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/eveniet-eaque-fugit
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/commodi-nobis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/iure-mollitia-modi
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/consectetur-modi-reprehenderit
1 compromised version
- Sep 2, 2024
Malicious code in @diotoborg/veritatis-eveniet-cumque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/veniam-blanditiis-sit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ut-nobis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/temporibus-ea (npm)
- Sep 2, 2024
Malicious code in @diotoborg/tempora-voluptas-distinctio (npm)
- Sep 2, 2024
Malicious code in @diotoborg/suscipit-officia (npm)
- Sep 2, 2024
Malicious code in @diotoborg/suscipit-hic (npm)
- Sep 2, 2024
Malicious code in @diotoborg/soluta-in (npm)
- Sep 2, 2024
Malicious code in @diotoborg/reprehenderit-nihil-veritatis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/repellat-qui (npm)
- Sep 2, 2024
Malicious code in @diotoborg/recusandae-non (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ratione-eaque-explicabo (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ratione-ducimus-porro (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quo-laudantium-beatae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quo-iste-culpa (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quo-adipisci-laboriosam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quidem-vel (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quia-ad-a (npm)
- Sep 2, 2024
Malicious code in @diotoborg/qui-ullam-ipsum (npm)
Page 6107 of 6,646