Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,287 total in npm · sorted newest first- Sep 2, 2024
Malicious code in @diotoborg/perspiciatis-doloribus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/officiis-soluta (npm)
- Sep 2, 2024
Malicious code in @diotoborg/officia-labore (npm)
- Sep 2, 2024
Malicious code in @diotoborg/occaecati-quibusdam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nostrum-nostrum-ipsum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/non-hic-magnam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nisi-suscipit-vel (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nisi-eaque-eaque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/necessitatibus-provident-adipisci (npm)
- Sep 2, 2024
Malicious code in @diotoborg/natus-similique-nemo (npm)
- Sep 2, 2024
Malicious code in @diotoborg/natus-delectus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nam-occaecati (npm)
- Sep 2, 2024
Malicious code in @diotoborg/minus-alias-quisquam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/maiores-nihil (npm)
- Sep 2, 2024
Malicious code in @diotoborg/magnam-incidunt-quasi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/libero-asperiores-at (npm)
- Sep 2, 2024
Malicious code in @diotoborg/laudantium-numquam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/laudantium-labore-alias (npm)
- Sep 2, 2024
Malicious code in @diotoborg/itaque-consequuntur (npm)
- Sep 2, 2024
Malicious code in @diotoborg/itaque-aliquid-quisquam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/iste-laborum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ipsa-ratione (npm)
- Sep 2, 2024
Malicious code in @diotoborg/inventore-quasi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/facilis-totam-atque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/facere-accusamus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eum-sunt (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eum-deleniti-tempora (npm)
- Sep 2, 2024
Malicious code in @diotoborg/error-nesciunt-qui (npm)
- Sep 2, 2024
Malicious code in @diotoborg/earum-vero (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eaque-iste (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolorum-iste-excepturi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolorum-ipsam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/doloribus-sapiente-voluptatum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolores-esse-incidunt (npm)
- Sep 2, 2024
Malicious code in @diotoborg/doloremque-tempore-harum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/doloremque-asperiores (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolor-tempora-fuga (npm)
- Sep 2, 2024
Malicious code in @diotoborg/distinctio-vel (npm)
- Sep 2, 2024
Malicious code in @diotoborg/deleniti-cum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/cumque-sequi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/cumque-repellat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/corrupti-quos-quo (npm)
- Sep 2, 2024
Malicious code in @diotoborg/corporis-voluptatum-saepe (npm)
- Sep 2, 2024
Malicious code in @diotoborg/consequuntur-rem (npm)
- Sep 2, 2024
Malicious code in @diotoborg/consequatur-sunt (npm)
- Sep 2, 2024
Malicious code in @diotoborg/consequatur-facilis-qui (npm)
- Sep 2, 2024
Malicious code in @diotoborg/beatae-possimus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/autem-suscipit-unde (npm)
- Sep 2, 2024
Malicious code in @diotoborg/aut-officiis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/atque-voluptatum-maxime (npm)
Page 6111 of 6,646