Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,287 total in npm · sorted newest first- Sep 2, 2024
Malware in @diotoborg/asperiores-maiores-velit
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quae-dolorum
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quae-optio-culpa
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quos-vero-asperiores
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/eaque-iste
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/facilis-totam-atque
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/nisi-suscipit-vel
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/dolor-tempora-fuga
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/at-totam-perspiciatis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/itaque-aliquid-quisquam
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/autem-suscipit-unde
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/doloribus-sapiente-voluptatum
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/dolores-esse-incidunt
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/eum-deleniti-tempora
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/non-hic-magnam
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/velit-labore
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/alias-amet
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/cumque-sequi
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/rem-rerum
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/consequatur-facilis-qui
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/corporis-voluptatum-saepe
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/amet-cum-culpa
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/doloremque-asperiores
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/voluptatibus-earum
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/rem-eum
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/officiis-soluta
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/consequatur-sunt
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/doloremque-tempore-harum
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/occaecati-quibusdam
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/tenetur-nobis-maiores
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/beatae-possimus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/corrupti-quos-quo
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/distinctio-vel
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quas-quo
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/natus-delectus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/inventore-quasi
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/aspernatur-id
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/magnam-incidunt-quasi
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/earum-vero
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/atque-voluptatum-maxime
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/dolorum-iste-excepturi
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/sed-tempora-natus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/minus-alias-quisquam
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/possimus-perspiciatis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/aliquam-quod-at
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/eum-sunt
1 compromised version
- Sep 2, 2024
Malicious code in @diotoborg/voluptatum-quae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/voluptatibus-officiis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/voluptatem-quod-magnam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/vero-sit-doloribus (npm)
Page 6113 of 6,646