Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,429 total · sorted newest first- Sep 2, 2024
Malware in @diotoborg/corporis-repellat-dicta
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/deleniti-totam-suscipit
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/velit-nulla
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/velit-maiores-voluptatibus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/provident-repellat
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/veritatis-nihil-vero
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/numquam-illum
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/facilis-nihil-quae
1 compromised version
- Sep 2, 2024
Malicious code in @diotoborg/voluptatum-voluptas-enim (npm)
- Sep 2, 2024
Malicious code in @diotoborg/voluptatibus-tempore (npm)
- Sep 2, 2024
Malicious code in @diotoborg/voluptate-sequi-natus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/velit-reiciendis-velit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ut-maxime (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ullam-molestias (npm)
- Sep 2, 2024
Malicious code in @diotoborg/totam-nemo (npm)
- Sep 2, 2024
Malicious code in @diotoborg/temporibus-quasi-quasi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/tempora-consequatur (npm)
- Sep 2, 2024
Malicious code in @diotoborg/suscipit-vitae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/soluta-numquam-ipsam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/sed-beatae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/sapiente-error (npm)
- Sep 2, 2024
Malicious code in @diotoborg/sapiente-alias-omnis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/repellendus-quaerat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/rem-ea (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ratione-animi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quo-aut (npm)
- Sep 2, 2024
Malicious code in @diotoborg/qui-nisi-ullam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quas-esse (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quaerat-voluptatum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/provident-voluptatibus-sunt (npm)
- Sep 2, 2024
Malicious code in @diotoborg/optio-voluptatum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/officiis-debitis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/odit-fuga (npm)
- Sep 2, 2024
Malicious code in @diotoborg/odio-architecto-ut (npm)
- Sep 2, 2024
Malicious code in @diotoborg/occaecati-fugit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nobis-facilis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/mollitia-beatae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/molestias-ab-rem (npm)
- Sep 2, 2024
Malicious code in @diotoborg/molestiae-quidem (npm)
- Sep 2, 2024
Malicious code in @diotoborg/molestiae-doloribus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/modi-consequatur (npm)
- Sep 2, 2024
Malicious code in @diotoborg/minima-omnis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/maxime-placeat-deserunt (npm)
- Sep 2, 2024
Malicious code in @diotoborg/maxime-eius (npm)
- Sep 2, 2024
Malicious code in @diotoborg/magni-quos (npm)
- Sep 2, 2024
Malicious code in @diotoborg/laboriosam-eos (npm)
- Sep 2, 2024
Malicious code in @diotoborg/labore-aspernatur-nobis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/itaque-suscipit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ipsam-ad (npm)
- Sep 2, 2024
Malicious code in @diotoborg/illum-eaque (npm)
Page 6560 of 7,289