Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,287 total in npm · sorted newest first- Sep 2, 2024
Malicious code in @diotoborg/distinctio-excepturi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dignissimos-aliquam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/cupiditate-accusantium-provident (npm)
- Sep 2, 2024
Malicious code in @diotoborg/cum-ut-iure (npm)
- Sep 2, 2024
Malicious code in @diotoborg/cum-aliquam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/corporis-quia (npm)
- Sep 2, 2024
Malicious code in @diotoborg/corporis-labore (npm)
- Sep 2, 2024
Malicious code in @diotoborg/consectetur-fuga (npm)
- Sep 2, 2024
Malicious code in @diotoborg/autem-id (npm)
- Sep 2, 2024
Malicious code in @diotoborg/assumenda-possimus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/architecto-reprehenderit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/aliquid-fugit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/aliquam-fugit-culpa (npm)
- Sep 2, 2024
Malicious code in @diotoborg/alias-animi-suscipit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ad-veritatis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/a-quas (npm)
- Sep 2, 2024
Malware in @diotoborg/cupiditate-accusantium-provident
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/maxime-placeat-deserunt
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quo-aut
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/earum-eligendi
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/ipsam-ad
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/distinctio-quaerat
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/magni-quos
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/facilis-unde
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/aliquam-fugit-culpa
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/repellendus-quaerat
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/cum-ut-iure
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/suscipit-vitae
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/optio-voluptatum
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/ratione-animi
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/voluptate-sequi-natus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/eaque-iusto
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/maxime-eius
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/alias-animi-suscipit
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/molestiae-quidem
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/sapiente-alias-omnis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/id-fugiat-velit
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/illum-eaque
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/tempora-consequatur
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/temporibus-quasi-quasi
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/qui-nisi-ullam
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/illo-qui
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/ex-quo-odio
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/occaecati-fugit
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/molestiae-doloribus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/distinctio-excepturi
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/officiis-debitis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/ullam-molestias
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/corporis-quia
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/molestias-ab-rem
1 compromised version
Page 6121 of 6,646