Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,287 total in npm · sorted newest first- Sep 2, 2024
Malicious code in @diotoborg/temporibus-fugiat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/tempore-beatae-debitis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/soluta-amet-enim (npm)
- Sep 2, 2024
Malicious code in @diotoborg/sequi-perspiciatis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/sapiente-nihil-sunt (npm)
- Sep 2, 2024
Malicious code in @diotoborg/rerum-mollitia (npm)
- Sep 2, 2024
Malicious code in @diotoborg/rem-unde-sunt (npm)
- Sep 2, 2024
Malicious code in @diotoborg/reiciendis-placeat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/reiciendis-molestias (npm)
- Sep 2, 2024
Malicious code in @diotoborg/recusandae-impedit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ratione-velit-quaerat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quod-atque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quisquam-libero (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quis-soluta-nesciunt (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quis-facere-repudiandae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quibusdam-vero (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quibusdam-libero (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quaerat-dicta (npm)
- Sep 2, 2024
Malicious code in @diotoborg/perspiciatis-placeat-cum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/perspiciatis-blanditiis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/officiis-ratione-facilis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/odio-pariatur (npm)
- Sep 2, 2024
Malicious code in @diotoborg/odio-dolores-officia (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nostrum-eveniet-officiis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/non-atque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nihil-laboriosam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nihil-eveniet-quisquam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nesciunt-veniam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nam-voluptates-in (npm)
- Sep 2, 2024
Malicious code in @diotoborg/mollitia-iste (npm)
- Sep 2, 2024
Malicious code in @diotoborg/molestias-quis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/minus-culpa (npm)
- Sep 2, 2024
Malicious code in @diotoborg/maiores-quae-quia (npm)
- Sep 2, 2024
Malicious code in @diotoborg/maiores-natus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/laudantium-itaque-esse (npm)
- Sep 2, 2024
Malicious code in @diotoborg/labore-placeat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/itaque-officiis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/itaque-incidunt-optio (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ipsam-sequi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ipsa-error (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ipsa-deleniti-ab (npm)
- Sep 2, 2024
Malicious code in @diotoborg/incidunt-animi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/illum-consequuntur (npm)
- Sep 2, 2024
Malicious code in @diotoborg/fuga-nihil (npm)
- Sep 2, 2024
Malicious code in @diotoborg/excepturi-incidunt (npm)
- Sep 2, 2024
Malicious code in @diotoborg/excepturi-ad (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eveniet-pariatur-esse (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eum-nostrum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eum-ab (npm)
- Sep 2, 2024
Malicious code in @diotoborg/est-unde-excepturi (npm)
Page 6114 of 6,646