Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,287 total in npm · sorted newest first- Sep 2, 2024
Malicious code in @diotoborg/sed-minus-itaque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/sed-doloremque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/rerum-similique-ex (npm)
- Sep 2, 2024
Malicious code in @diotoborg/rerum-excepturi-nostrum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ratione-error-odio (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quos-eos (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quis-tempore-distinctio (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quidem-debitis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quia-voluptatum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quasi-sint (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quasi-neque-qui (npm)
- Sep 2, 2024
Malicious code in @diotoborg/provident-repellat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/provident-consequuntur (npm)
- Sep 2, 2024
Malicious code in @diotoborg/placeat-molestias (npm)
- Sep 2, 2024
Malicious code in @diotoborg/perferendis-odit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/perferendis-illo-facilis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/officiis-nam-dignissimos (npm)
- Sep 2, 2024
Malicious code in @diotoborg/odit-architecto-aliquam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/numquam-veritatis-error (npm)
- Sep 2, 2024
Malicious code in @diotoborg/numquam-illum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nulla-tempora-voluptate (npm)
- Sep 2, 2024
Malicious code in @diotoborg/non-voluptatum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nobis-aut-deleniti (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nisi-quo-in (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nesciunt-ullam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/neque-inventore-corporis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/necessitatibus-temporibus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/natus-facere-esse (npm)
- Sep 2, 2024
Malicious code in @diotoborg/mollitia-tempore (npm)
- Sep 2, 2024
Malicious code in @diotoborg/molestiae-ratione-tempora (npm)
- Sep 2, 2024
Malicious code in @diotoborg/magnam-dolorem (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ipsa-magni-debitis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/inventore-beatae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/harum-vitae-nobis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/harum-neque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/fugiat-doloremque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/fugiat-distinctio (npm)
- Sep 2, 2024
Malicious code in @diotoborg/facilis-nihil-quae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eveniet-fugiat-ex (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eum-pariatur (npm)
- Sep 2, 2024
Malicious code in @diotoborg/et-facere-iusto (npm)
- Sep 2, 2024
Malicious code in @diotoborg/esse-distinctio-repellat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/esse-accusantium-ratione (npm)
- Sep 2, 2024
Malicious code in @diotoborg/enim-molestias (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eligendi-est-unde (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eaque-maxime (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolores-velit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolore-sint-deserunt (npm)
- Sep 2, 2024
Malicious code in @diotoborg/deserunt-illo-tempora (npm)
- Sep 2, 2024
Malicious code in @diotoborg/deleniti-totam-suscipit (npm)
Page 6117 of 6,646