Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Sep 2, 2024
Malware in @diotoborg/natus-delectus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/inventore-quasi
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/aspernatur-id
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/magnam-incidunt-quasi
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/earum-vero
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/atque-voluptatum-maxime
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/dolorum-iste-excepturi
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/sed-tempora-natus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/minus-alias-quisquam
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/possimus-perspiciatis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/aliquam-quod-at
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/eum-sunt
1 compromised version
- Sep 2, 2024
Malicious code in @diotoborg/voluptatum-quae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/voluptatibus-officiis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/voluptatem-quod-magnam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/vero-sit-doloribus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/temporibus-fugiat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/tempore-beatae-debitis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/soluta-amet-enim (npm)
- Sep 2, 2024
Malicious code in @diotoborg/sequi-perspiciatis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/sapiente-nihil-sunt (npm)
- Sep 2, 2024
Malicious code in @diotoborg/rerum-mollitia (npm)
- Sep 2, 2024
Malicious code in @diotoborg/rem-unde-sunt (npm)
- Sep 2, 2024
Malicious code in @diotoborg/reiciendis-placeat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/reiciendis-molestias (npm)
- Sep 2, 2024
Malicious code in @diotoborg/recusandae-impedit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ratione-velit-quaerat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quod-atque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quisquam-libero (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quis-soluta-nesciunt (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quis-facere-repudiandae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quibusdam-vero (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quibusdam-libero (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quaerat-dicta (npm)
- Sep 2, 2024
Malicious code in @diotoborg/perspiciatis-placeat-cum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/perspiciatis-blanditiis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/officiis-ratione-facilis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/odio-pariatur (npm)
- Sep 2, 2024
Malicious code in @diotoborg/odio-dolores-officia (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nostrum-eveniet-officiis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/non-atque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nihil-laboriosam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nihil-eveniet-quisquam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nesciunt-veniam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nam-voluptates-in (npm)
- Sep 2, 2024
Malicious code in @diotoborg/mollitia-iste (npm)
- Sep 2, 2024
Malicious code in @diotoborg/molestias-quis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/minus-culpa (npm)
- Sep 2, 2024
Malicious code in @diotoborg/maiores-quae-quia (npm)
- Sep 2, 2024
Malicious code in @diotoborg/maiores-natus (npm)
Page 6558 of 7,293