Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,287 total in npm · sorted newest first- Sep 2, 2024
Malicious code in @diotoborg/soluta-numquam-ipsam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/sed-beatae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/sapiente-error (npm)
- Sep 2, 2024
Malicious code in @diotoborg/sapiente-alias-omnis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/repellendus-quaerat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/rem-ea (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ratione-animi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quo-aut (npm)
- Sep 2, 2024
Malicious code in @diotoborg/qui-nisi-ullam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quas-esse (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quaerat-voluptatum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/provident-voluptatibus-sunt (npm)
- Sep 2, 2024
Malicious code in @diotoborg/optio-voluptatum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/officiis-debitis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/odit-fuga (npm)
- Sep 2, 2024
Malicious code in @diotoborg/odio-architecto-ut (npm)
- Sep 2, 2024
Malicious code in @diotoborg/occaecati-fugit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nobis-facilis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/mollitia-beatae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/molestias-ab-rem (npm)
- Sep 2, 2024
Malicious code in @diotoborg/molestiae-quidem (npm)
- Sep 2, 2024
Malicious code in @diotoborg/molestiae-doloribus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/modi-consequatur (npm)
- Sep 2, 2024
Malicious code in @diotoborg/minima-omnis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/maxime-placeat-deserunt (npm)
- Sep 2, 2024
Malicious code in @diotoborg/maxime-eius (npm)
- Sep 2, 2024
Malicious code in @diotoborg/magni-quos (npm)
- Sep 2, 2024
Malicious code in @diotoborg/laboriosam-eos (npm)
- Sep 2, 2024
Malicious code in @diotoborg/labore-aspernatur-nobis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/itaque-suscipit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ipsam-ad (npm)
- Sep 2, 2024
Malicious code in @diotoborg/illum-eaque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/illo-qui (npm)
- Sep 2, 2024
Malicious code in @diotoborg/id-fugiat-velit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/fuga-molestias (npm)
- Sep 2, 2024
Malicious code in @diotoborg/facilis-unde (npm)
- Sep 2, 2024
Malicious code in @diotoborg/facilis-perferendis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/facilis-pariatur (npm)
- Sep 2, 2024
Malicious code in @diotoborg/explicabo-pariatur (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ex-quo-odio (npm)
- Sep 2, 2024
Malicious code in @diotoborg/et-maxime-hic (npm)
- Sep 2, 2024
Malicious code in @diotoborg/et-asperiores (npm)
- Sep 2, 2024
Malicious code in @diotoborg/et-architecto (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eos-quidem (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eius-animi-ullam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/earum-eligendi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eaque-iusto (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolores-praesentium-assumenda (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolorem-dolorem (npm)
- Sep 2, 2024
Malicious code in @diotoborg/distinctio-quaerat (npm)
Page 6120 of 6,646