Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,288 total in npm · sorted newest first- Sep 2, 2024
Malicious code in @diotoborg/aspernatur-nihil (npm)
- Sep 2, 2024
Malicious code in @diotoborg/asperiores-similique-quasi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/asperiores-placeat-officia (npm)
- Sep 2, 2024
Malicious code in @diotoborg/aperiam-amet-natus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ad-aliquid (npm)
- Sep 2, 2024
Malware in @diotoborg/asperiores-similique-quasi
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/culpa-amet-totam
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quas-fugiat
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/dolore-odio-est
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/in-explicabo
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/ea-praesentium
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/dolorum-dolorum
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/explicabo-laboriosam-maxime
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/enim-explicabo-saepe
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/porro-modi-accusamus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/recusandae-non
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/officia-iste
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quo-laudantium-beatae
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quia-ad-a
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/consectetur-consequuntur
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/asperiores-placeat-officia
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/odio-accusantium
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/magni-illo
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/itaque-asperiores
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/nemo-voluptatibus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/corrupti-beatae
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/corporis-optio-tenetur
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/mollitia-officia
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/dolorum-atque
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/veniam-blanditiis-sit
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/minus-ducimus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/inventore-amet
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/ratione-ducimus-porro
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/repellat-qui
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/ut-nobis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/eveniet-officia
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/cumque-velit-eius
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/veritatis-eveniet-cumque
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/explicabo-optio
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quo-adipisci-laboriosam
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/beatae-ad-voluptatem
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/et-voluptatum-mollitia
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/mollitia-ratione
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/aspernatur-nihil
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/dolorum-tempora
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/excepturi-fuga-sequi
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/suscipit-hic
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/maxime-quisquam
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/neque-sit-molestias
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/hic-repellat
1 compromised version
Page 6109 of 6,646