Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,278 total in npm · sorted newest first- Sep 2, 2024
Malware in @diotoborg/dolore-id
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/distinctio-sed
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/optio-provident-omnis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/itaque-ratione-beatae
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/occaecati-porro
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/distinctio-quia
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/doloribus-error
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/perspiciatis-totam
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quod-voluptatibus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/aut-illo
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/recusandae-omnis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/explicabo-error-porro
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/architecto-at
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/sit-omnis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/accusamus-nesciunt
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/repellendus-est
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/modi-ducimus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/libero-debitis-possimus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/dolorum-unde
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/cum-illum
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/fuga-rem-inventore
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/maxime-iste
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/nulla-ut
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/facere-cupiditate
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/culpa-eum-laudantium
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/repellat-tenetur-cupiditate
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/laborum-recusandae
1 compromised version
- Sep 2, 2024
Malicious code in @diotoborg/vero-eligendi-deleniti (npm)
- Sep 2, 2024
Malicious code in @diotoborg/verbose-robot (npm)
- Sep 2, 2024
Malicious code in @diotoborg/velit-placeat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/vel-labore-incidunt (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quo-neque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quis-fugit-possimus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quia-eaque-molestiae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/provident-accusamus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/placeat-placeat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/non-reiciendis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/necessitatibus-voluptas-iusto (npm)
- Sep 2, 2024
Malicious code in @diotoborg/necessitatibus-nam-tempora (npm)
- Sep 2, 2024
Malicious code in @diotoborg/illum-ad-corporis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/illo-placeat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/fuga-sequi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ex-repellat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eum-tempora-distinctio (npm)
- Sep 2, 2024
Malicious code in @diotoborg/est-voluptate (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolorem-possimus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolor-iure (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolor-earum-quia (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dicta-recusandae-veniam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/consequuntur-dolorem-dicta (npm)
Page 6126 of 6,646