Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,288 total in npm · sorted newest first- Sep 2, 2024
Malicious code in @diotoborg/quas-fugiat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/provident-eligendi-porro (npm)
- Sep 2, 2024
Malicious code in @diotoborg/porro-modi-accusamus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/optio-tempora-impedit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/officia-iste (npm)
- Sep 2, 2024
Malicious code in @diotoborg/odio-accusantium (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nobis-mollitia (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nisi-molestiae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/neque-sit-molestias (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nemo-voluptatibus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/mollitia-ratione (npm)
- Sep 2, 2024
Malicious code in @diotoborg/mollitia-officia (npm)
- Sep 2, 2024
Malicious code in @diotoborg/minus-ducimus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/maxime-quisquam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/magni-velit-iure (npm)
- Sep 2, 2024
Malicious code in @diotoborg/magni-illo (npm)
- Sep 2, 2024
Malicious code in @diotoborg/laboriosam-exercitationem (npm)
- Sep 2, 2024
Malicious code in @diotoborg/itaque-asperiores (npm)
- Sep 2, 2024
Malicious code in @diotoborg/inventore-amet (npm)
- Sep 2, 2024
Malicious code in @diotoborg/incidunt-odio (npm)
- Sep 2, 2024
Malicious code in @diotoborg/incidunt-architecto (npm)
- Sep 2, 2024
Malicious code in @diotoborg/in-explicabo (npm)
- Sep 2, 2024
Malicious code in @diotoborg/illo-amet-architecto (npm)
- Sep 2, 2024
Malicious code in @diotoborg/hic-repellat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/explicabo-optio (npm)
- Sep 2, 2024
Malicious code in @diotoborg/explicabo-nam-iste (npm)
- Sep 2, 2024
Malicious code in @diotoborg/explicabo-laboriosam-maxime (npm)
- Sep 2, 2024
Malicious code in @diotoborg/exercitationem-et (npm)
- Sep 2, 2024
Malicious code in @diotoborg/excepturi-fuga-sequi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eveniet-officia (npm)
- Sep 2, 2024
Malicious code in @diotoborg/et-voluptatum-mollitia (npm)
- Sep 2, 2024
Malicious code in @diotoborg/est-necessitatibus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/enim-explicabo-saepe (npm)
- Sep 2, 2024
Malicious code in @diotoborg/earum-eum-doloribus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ea-praesentium (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ducimus-eveniet (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolorum-tempora (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolorum-dolorum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolorum-atque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolores-voluptates (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolore-odio-est (npm)
- Sep 2, 2024
Malicious code in @diotoborg/delectus-voluptatibus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/cumque-velit-eius (npm)
- Sep 2, 2024
Malicious code in @diotoborg/culpa-amet-totam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/corrupti-beatae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/corporis-optio-tenetur (npm)
- Sep 2, 2024
Malicious code in @diotoborg/consequuntur-laboriosam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/consectetur-consequuntur (npm)
- Sep 2, 2024
Malicious code in @diotoborg/beatae-ad-voluptatem (npm)
- Sep 2, 2024
Malicious code in @diotoborg/atque-dolorem-ratione (npm)
Page 6108 of 6,646