Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,272 total in npm · sorted newest first- Jul 4, 2024
Malicious code in @zitterorg/pariatur-asperiores (npm)
- Jul 4, 2024
Malicious code in @zitterorg/odio-itaque-harum (npm)
- Jul 4, 2024
Malicious code in @zitterorg/numquam-assumenda (npm)
- Jul 4, 2024
Malicious code in @zitterorg/nostrum-voluptatibus (npm)
- Jul 4, 2024
Malicious code in @zitterorg/nobis-possimus (npm)
- Jul 4, 2024
Malicious code in @zitterorg/nisi-veniam (npm)
- Jul 4, 2024
Malicious code in @zitterorg/nemo-distinctio (npm)
- Jul 4, 2024
Malicious code in @zitterorg/natus-eos-vel (npm)
- Jul 4, 2024
Malicious code in @zitterorg/modi-quaerat-voluptas (npm)
- Jul 4, 2024
Malicious code in @zitterorg/minus-itaque-odit (npm)
- Jul 4, 2024
Malicious code in @zitterorg/maxime-tenetur (npm)
- Jul 4, 2024
Malicious code in @zitterorg/iusto-ipsum (npm)
- Jul 4, 2024
Malicious code in @zitterorg/itaque-quae-dolore (npm)
- Jul 4, 2024
Malicious code in @zitterorg/iste-veritatis (npm)
- Jul 4, 2024
Malicious code in @zitterorg/ipsam-deserunt (npm)
- Jul 4, 2024
Malicious code in @zitterorg/inventore-at-sit (npm)
- Jul 4, 2024
Malicious code in @zitterorg/incidunt-cum (npm)
- Jul 4, 2024
Malicious code in @zitterorg/in-labore-ratione (npm)
- Jul 4, 2024
Malicious code in @zitterorg/illum-recusandae (npm)
- Jul 4, 2024
Malicious code in @zitterorg/illo-accusantium (npm)
- Jul 4, 2024
Malicious code in @zitterorg/eum-veritatis-placeat (npm)
- Jul 4, 2024
Malicious code in @zitterorg/error-quisquam (npm)
- Jul 4, 2024
Malicious code in @zitterorg/eos-beatae-aliquid (npm)
- Jul 4, 2024
Malicious code in @zitterorg/eius-sint-sunt (npm)
- Jul 4, 2024
Malicious code in @zitterorg/dolorem-quibusdam-dicta (npm)
- Jul 4, 2024
Malicious code in @zitterorg/deserunt-dolorum-reiciendis (npm)
- Jul 4, 2024
Malicious code in @zitterorg/delectus-nostrum-doloribus (npm)
- Jul 4, 2024
Malicious code in @zitterorg/consectetur-quos (npm)
- Jul 4, 2024
Malicious code in @zitterorg/commodi-eum (npm)
- Jul 4, 2024
Malicious code in @zitterorg/architecto-a-asperiores (npm)
- Jul 4, 2024
Malicious code in @zitterorg/adipisci-dolore (npm)
- Jul 4, 2024
Malicious code in @zitterorg/accusantium-voluptatum (npm)
- Jul 4, 2024
Malware in @zitterorg/modi-quaerat-voluptas
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/delectus-nostrum-doloribus
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/error-quisquam
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/in-labore-ratione
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/deserunt-dolorum-reiciendis
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/ut-ex
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/nobis-possimus
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/eum-veritatis-placeat
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/illum-recusandae
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/illo-accusantium
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/perferendis-aperiam
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/inventore-at-sit
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/architecto-a-asperiores
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/adipisci-dolore
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/accusantium-voluptatum
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/voluptate-aliquam
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/praesentium-voluptatum
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/iste-veritatis
1 compromised version
Page 6159 of 6,646