Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,336 total · sorted newest first- Sep 2, 2024
Malicious code in @diotoborg/similique-fugit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/repellendus-autem-itaque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/qui-velit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quae-vel (npm)
- Sep 2, 2024
Malicious code in @diotoborg/provident-tempore-nostrum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/optio-maiores (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nisi-velit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nemo-reprehenderit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/modi-necessitatibus-sed (npm)
- Sep 2, 2024
Malicious code in @diotoborg/labore-inventore-exercitationem (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ipsum-eaque-quidem (npm)
- Sep 2, 2024
Malicious code in @diotoborg/inventore-culpa-delectus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/incidunt-quo-neque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eum-unde-sint (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ea-sint (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolore-magnam-ipsam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/culpa-reiciendis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/autem-vero (npm)
- Sep 2, 2024
Malicious code in @diotoborg/aut-provident-cumque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/assumenda-praesentium (npm)
- Sep 2, 2024
Malicious code in @diotoborg/asperiores-hic (npm)
- Sep 2, 2024
Malicious code in @diotoborg/adipisci-dolorum (npm)
- Sep 2, 2024
Malware in @diotoborg/similique-fugit
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/asperiores-hic
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/adipisci-dolorum
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/voluptas-nulla
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/repellendus-autem-itaque
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/nisi-velit
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/eum-unde-sint
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/optio-maiores
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/labore-inventore-exercitationem
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/incidunt-quo-neque
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/autem-vero
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/culpa-reiciendis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/aut-provident-cumque
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/sit-voluptas
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/qui-velit
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/nemo-reprehenderit
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/voluptatum-repellendus-architecto
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/assumenda-praesentium
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quae-vel
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/inventore-culpa-delectus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/ipsum-eaque-quidem
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/dolore-magnam-ipsam
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/provident-tempore-nostrum
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/modi-necessitatibus-sed
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/ea-sint
1 compromised version
- Sep 2, 2024
Malicious code in @diotoborg/voluptatum-veritatis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/voluptate-fuga (npm)
- Sep 2, 2024
Malicious code in @diotoborg/voluptate-exercitationem (npm)
Page 6562 of 7,307