Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,836 total · sorted newest first- Sep 2, 2024
Malicious code in @diotoborg/est-beatae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/est-ad (npm)
- Sep 2, 2024
Malicious code in @diotoborg/esse-perspiciatis-voluptatem (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eius-pariatur (npm)
- Sep 2, 2024
Malicious code in @diotoborg/earum-consequuntur (npm)
- Sep 2, 2024
Malicious code in @diotoborg/distinctio-voluptates-deleniti (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dignissimos-placeat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/deserunt-cupiditate (npm)
- Sep 2, 2024
Malicious code in @diotoborg/delectus-recusandae-aut (npm)
- Sep 2, 2024
Malicious code in @diotoborg/cum-illum-cum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/consequuntur-laborum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/consectetur-modi-reprehenderit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/commodi-nobis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/beatae-illo (npm)
- Sep 2, 2024
Malicious code in @diotoborg/atque-eaque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/aperiam-voluptatibus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/aperiam-pariatur (npm)
- Sep 2, 2024
Malicious code in @diotoborg/aperiam-iste (npm)
- Sep 2, 2024
Malicious code in @diotoborg/aliquam-dolorum-ipsa (npm)
- Sep 2, 2024
Malicious code in @diotoborg/aliquam-commodi-ducimus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/aliquam-aperiam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/adipisci-esse-tempore (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ad-tenetur-eveniet (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ad-non (npm)
- Sep 2, 2024
Malicious code in @diotoborg/accusantium-quas (npm)
- Sep 2, 2024
Malicious code in @diotoborg/accusamus-nam (npm)
- Sep 2, 2024
Malware in @diotoborg/aperiam-pariatur
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/delectus-recusandae-aut
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quidem-commodi
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/ad-non
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/nam-adipisci-fuga
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/temporibus-neque-quasi
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/psychic-bassoon
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/esse-perspiciatis-voluptatem
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/sed-veniam-cupiditate
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/voluptate-eius
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/veritatis-nobis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/explicabo-vitae-velit
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/necessitatibus-at
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/accusantium-quas
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/sed-sunt
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/voluptate-ducimus-eius
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/aperiam-iste
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/atque-eaque
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/voluptate-exercitationem
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/est-beatae
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/deserunt-cupiditate
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quis-eveniet
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/cum-illum-cum
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/earum-consequuntur
1 compromised version
Page 6554 of 7,297