Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,275 total in npm · sorted newest first- Jul 4, 2024
Malware in @zitterorg/odio-non
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/nostrum-vel-beatae
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/velit-occaecati
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/tempore-debitis-minima
1 compromised version
- Jul 4, 2024
Malicious code in @zitterorg/voluptatibus-suscipit (npm)
- Jul 4, 2024
Malicious code in @zitterorg/voluptate-voluptatem (npm)
- Jul 4, 2024
Malicious code in @zitterorg/vero-rem (npm)
- Jul 4, 2024
Malicious code in @zitterorg/veritatis-repellat-debitis (npm)
- Jul 4, 2024
Malicious code in @zitterorg/unde-exercitationem (npm)
- Jul 4, 2024
Malicious code in @zitterorg/sunt-consequuntur (npm)
- Jul 4, 2024
Malicious code in @zitterorg/sit-expedita (npm)
- Jul 4, 2024
Malicious code in @zitterorg/saepe-eos (npm)
- Jul 4, 2024
Malicious code in @zitterorg/repudiandae-nihil-architecto (npm)
- Jul 4, 2024
Malicious code in @zitterorg/repudiandae-blanditiis (npm)
- Jul 4, 2024
Malicious code in @zitterorg/reprehenderit-soluta-ad (npm)
- Jul 4, 2024
Malicious code in @zitterorg/repellat-ut (npm)
- Jul 4, 2024
Malicious code in @zitterorg/reiciendis-culpa (npm)
- Jul 4, 2024
Malicious code in @zitterorg/quisquam-distinctio-veritatis (npm)
- Jul 4, 2024
Malicious code in @zitterorg/quibusdam-sit-qui (npm)
- Jul 4, 2024
Malicious code in @zitterorg/quibusdam-numquam (npm)
- Jul 4, 2024
Malicious code in @zitterorg/qui-dicta (npm)
- Jul 4, 2024
Malicious code in @zitterorg/quas-autem (npm)
- Jul 4, 2024
Malicious code in @zitterorg/quaerat-error-quae (npm)
- Jul 4, 2024
Malicious code in @zitterorg/psychic-adventure (npm)
- Jul 4, 2024
Malicious code in @zitterorg/possimus-corrupti (npm)
- Jul 4, 2024
Malicious code in @zitterorg/placeat-porro (npm)
- Jul 4, 2024
Malicious code in @zitterorg/pariatur-ad (npm)
- Jul 4, 2024
Malicious code in @zitterorg/omnis-harum (npm)
- Jul 4, 2024
Malicious code in @zitterorg/omnis-delectus-deserunt (npm)
- Jul 4, 2024
Malicious code in @zitterorg/officia-tempora-sequi (npm)
- Jul 4, 2024
Malicious code in @zitterorg/officia-hic (npm)
- Jul 4, 2024
Malicious code in @zitterorg/occaecati-beatae (npm)
- Jul 4, 2024
Malicious code in @zitterorg/nostrum-porro (npm)
- Jul 4, 2024
Malicious code in @zitterorg/nemo-dolorem (npm)
- Jul 4, 2024
Malicious code in @zitterorg/natus-tempora (npm)
- Jul 4, 2024
Malicious code in @zitterorg/molestias-in (npm)
- Jul 4, 2024
Malicious code in @zitterorg/modi-non-tenetur (npm)
- Jul 4, 2024
Malicious code in @zitterorg/laudantium-rerum (npm)
- Jul 4, 2024
Malicious code in @zitterorg/itaque-sapiente-similique (npm)
- Jul 4, 2024
Malicious code in @zitterorg/itaque-nisi-veritatis (npm)
- Jul 4, 2024
Malicious code in @zitterorg/itaque-nesciunt-voluptatibus (npm)
- Jul 4, 2024
Malicious code in @zitterorg/impedit-ex-praesentium (npm)
- Jul 4, 2024
Malicious code in @zitterorg/illum-perferendis-consectetur (npm)
- Jul 4, 2024
Malicious code in @zitterorg/illo-perspiciatis-animi (npm)
- Jul 4, 2024
Malicious code in @zitterorg/hic-dicta (npm)
- Jul 4, 2024
Malicious code in @zitterorg/harum-ratione (npm)
- Jul 4, 2024
Malicious code in @zitterorg/fluffy-waddle (npm)
- Jul 4, 2024
Malicious code in @zitterorg/expedita-quasi (npm)
- Jul 4, 2024
Malicious code in @zitterorg/eum-expedita (npm)
- Jul 4, 2024
Malicious code in @zitterorg/earum-harum (npm)
Page 6150 of 6,646