Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,788 total · sorted newest first- Sep 2, 2024
Malware in @diotoborg/soluta-cupiditate-nobis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/provident-enim-animi
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/adipisci-esse-tempore
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/eveniet-eaque-fugit
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/commodi-nobis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/iure-mollitia-modi
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/consectetur-modi-reprehenderit
1 compromised version
- Sep 2, 2024
Malicious code in @diotoborg/veritatis-eveniet-cumque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/veniam-blanditiis-sit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ut-nobis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/temporibus-ea (npm)
- Sep 2, 2024
Malicious code in @diotoborg/tempora-voluptas-distinctio (npm)
- Sep 2, 2024
Malicious code in @diotoborg/suscipit-officia (npm)
- Sep 2, 2024
Malicious code in @diotoborg/suscipit-hic (npm)
- Sep 2, 2024
Malicious code in @diotoborg/soluta-in (npm)
- Sep 2, 2024
Malicious code in @diotoborg/reprehenderit-nihil-veritatis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/repellat-qui (npm)
- Sep 2, 2024
Malicious code in @diotoborg/recusandae-non (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ratione-eaque-explicabo (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ratione-ducimus-porro (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quo-laudantium-beatae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quo-iste-culpa (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quo-adipisci-laboriosam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quidem-vel (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quia-ad-a (npm)
- Sep 2, 2024
Malicious code in @diotoborg/qui-ullam-ipsum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quas-fugiat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/provident-eligendi-porro (npm)
- Sep 2, 2024
Malicious code in @diotoborg/porro-modi-accusamus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/optio-tempora-impedit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/officia-iste (npm)
- Sep 2, 2024
Malicious code in @diotoborg/odio-accusantium (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nobis-mollitia (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nisi-molestiae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/neque-sit-molestias (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nemo-voluptatibus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/mollitia-ratione (npm)
- Sep 2, 2024
Malicious code in @diotoborg/mollitia-officia (npm)
- Sep 2, 2024
Malicious code in @diotoborg/minus-ducimus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/maxime-quisquam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/magni-velit-iure (npm)
- Sep 2, 2024
Malicious code in @diotoborg/magni-illo (npm)
- Sep 2, 2024
Malicious code in @diotoborg/laboriosam-exercitationem (npm)
- Sep 2, 2024
Malicious code in @diotoborg/itaque-asperiores (npm)
- Sep 2, 2024
Malicious code in @diotoborg/inventore-amet (npm)
- Sep 2, 2024
Malicious code in @diotoborg/incidunt-odio (npm)
- Sep 2, 2024
Malicious code in @diotoborg/incidunt-architecto (npm)
- Sep 2, 2024
Malicious code in @diotoborg/in-explicabo (npm)
- Sep 2, 2024
Malicious code in @diotoborg/illo-amet-architecto (npm)
- Sep 2, 2024
Malicious code in @diotoborg/hic-repellat (npm)
Page 6555 of 7,296