Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,275 total in npm · sorted newest first- Jul 4, 2024
Malicious code in @zitterorg/doloribus-itaque (npm)
- Jul 4, 2024
Malicious code in @zitterorg/dolores-perspiciatis-rem (npm)
- Jul 4, 2024
Malicious code in @zitterorg/dolores-debitis (npm)
- Jul 4, 2024
Malicious code in @zitterorg/doloremque-sed (npm)
- Jul 4, 2024
Malicious code in @zitterorg/doloremque-aspernatur-molestias (npm)
- Jul 4, 2024
Malicious code in @zitterorg/dolore-quas (npm)
- Jul 4, 2024
Malicious code in @zitterorg/delectus-est (npm)
- Jul 4, 2024
Malicious code in @zitterorg/cum-non (npm)
- Jul 4, 2024
Malicious code in @zitterorg/cum-commodi (npm)
- Jul 4, 2024
Malicious code in @zitterorg/corrupti-animi-beatae (npm)
- Jul 4, 2024
Malicious code in @zitterorg/corporis-ut-consectetur (npm)
- Jul 4, 2024
Malicious code in @zitterorg/corporis-sit (npm)
- Jul 4, 2024
Malicious code in @zitterorg/corporis-architecto (npm)
- Jul 4, 2024
Malicious code in @zitterorg/blanditiis-esse-iusto (npm)
- Jul 4, 2024
Malicious code in @zitterorg/at-esse-odit (npm)
- Jul 4, 2024
Malicious code in @zitterorg/asperiores-molestias (npm)
- Jul 4, 2024
Malicious code in @zitterorg/asperiores-consectetur (npm)
- Jul 4, 2024
Malicious code in @zitterorg/architecto-dolore (npm)
- Jul 4, 2024
Malicious code in @zitterorg/aperiam-nisi (npm)
- Jul 4, 2024
Malicious code in @zitterorg/animi-atque (npm)
- Jul 4, 2024
Malicious code in @zitterorg/animi-accusantium-similique (npm)
- Jul 4, 2024
Malicious code in @zitterorg/amet-vero-laboriosam (npm)
- Jul 4, 2024
Malicious code in @zitterorg/amet-minus (npm)
- Jul 4, 2024
Malicious code in @zitterorg/amet-accusamus (npm)
- Jul 4, 2024
Malicious code in @zitterorg/aliquid-ducimus-provident (npm)
- Jul 4, 2024
Malicious code in @zitterorg/adipisci-quae-eius (npm)
- Jul 4, 2024
Malicious code in @zitterorg/adipisci-ipsum (npm)
- Jul 4, 2024
Malicious code in @zitterorg/adipisci-autem (npm)
- Jul 4, 2024
Malicious code in @zitterorg/accusantium-reprehenderit-quisquam (npm)
- Jul 4, 2024
Malicious code in @zitterorg/ab-fugiat-impedit (npm)
- Jul 4, 2024
Malware in @zitterorg/qui-dicta
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/accusantium-reprehenderit-quisquam
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/corporis-sit
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/unde-exercitationem
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/omnis-harum
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/quibusdam-numquam
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/aliquid-ducimus-provident
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/repudiandae-nihil-architecto
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/doloremque-sed
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/animi-accusantium-similique
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/blanditiis-esse-iusto
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/veritatis-repellat-debitis
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/amet-minus
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/doloremque-aspernatur-molestias
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/laudantium-rerum
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/fluffy-waddle
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/harum-ratione
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/doloribus-itaque
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/eum-expedita
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/hic-dicta
1 compromised version
Page 6151 of 6,646