Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,278 total in npm · sorted newest first- Sep 2, 2024
Malicious code in @diotoborg/perferendis-inventore (npm)
- Sep 2, 2024
Malicious code in @diotoborg/omnis-necessitatibus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/officia-voluptate (npm)
- Sep 2, 2024
Malicious code in @diotoborg/odio-consequatur-corporis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/occaecati-consectetur-possimus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nulla-hic (npm)
- Sep 2, 2024
Malicious code in @diotoborg/neque-pariatur (npm)
- Sep 2, 2024
Malicious code in @diotoborg/molestiae-maxime (npm)
- Sep 2, 2024
Malicious code in @diotoborg/modi-sapiente (npm)
- Sep 2, 2024
Malicious code in @diotoborg/maiores-corrupti (npm)
- Sep 2, 2024
Malicious code in @diotoborg/laboriosam-aut (npm)
- Sep 2, 2024
Malicious code in @diotoborg/iusto-molestiae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ipsam-atque-eos (npm)
- Sep 2, 2024
Malicious code in @diotoborg/incidunt-earum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/harum-vitae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/fugiat-nobis-praesentium (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eum-est-nulla (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eius-voluptate (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eaque-reprehenderit-exercitationem (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eaque-illum-qui (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ea-consectetur (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolores-fugiat-autem (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolores-dolore (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolore-nesciunt (npm)
- Sep 2, 2024
Malicious code in @diotoborg/distinctio-a-doloremque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/deserunt-eum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/delectus-necessitatibus-voluptatum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/debitis-blanditiis-dolore (npm)
- Sep 2, 2024
Malicious code in @diotoborg/cupiditate-perferendis-repudiandae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/cum-saepe-minima (npm)
- Sep 2, 2024
Malicious code in @diotoborg/cum-iusto (npm)
- Sep 2, 2024
Malicious code in @diotoborg/consequatur-velit-quae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/consequatur-aut (npm)
- Sep 2, 2024
Malicious code in @diotoborg/blanditiis-fugiat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/autem-nam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/at-eos (npm)
- Sep 2, 2024
Malicious code in @diotoborg/assumenda-rem-iure (npm)
- Sep 2, 2024
Malicious code in @diotoborg/aliquam-perferendis-repudiandae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/alias-provident-fuga (npm)
- Sep 2, 2024
Malicious code in @diotoborg/accusamus-itaque-adipisci (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ab-facere (npm)
- Sep 2, 2024
Malicious code in @diotoborg/a-odio (npm)
- Sep 2, 2024
Malware in @diotoborg/perferendis-inventore
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/dolore-nesciunt
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/recusandae-reprehenderit
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/ratione-similique
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/incidunt-earum
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/ipsam-atque-eos
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/assumenda-rem-iure
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/occaecati-consectetur-possimus
1 compromised version
Page 6123 of 6,646