Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,336 total · sorted newest first- Sep 2, 2024
Malicious code in @diotoborg/voluptate-eius (npm)
- Sep 2, 2024
Malicious code in @diotoborg/voluptate-ducimus-eius (npm)
- Sep 2, 2024
Malicious code in @diotoborg/vitae-quo (npm)
- Sep 2, 2024
Malicious code in @diotoborg/vero-quaerat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/veritatis-nobis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ullam-neque-voluptates (npm)
- Sep 2, 2024
Malicious code in @diotoborg/temporibus-neque-quasi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/temporibus-dicta (npm)
- Sep 2, 2024
Malicious code in @diotoborg/suscipit-amet (npm)
- Sep 2, 2024
Malicious code in @diotoborg/soluta-cupiditate-nobis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/sit-et-quibusdam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/sed-veniam-cupiditate (npm)
- Sep 2, 2024
Malicious code in @diotoborg/sed-sunt (npm)
- Sep 2, 2024
Malicious code in @diotoborg/rem-minima (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quod-similique-iusto (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quo-dolorem-ducimus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quis-placeat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quis-eveniet (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quidem-commodi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quaerat-tempore (npm)
- Sep 2, 2024
Malicious code in @diotoborg/psychic-bassoon (npm)
- Sep 2, 2024
Malicious code in @diotoborg/provident-enim-animi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/praesentium-architecto (npm)
- Sep 2, 2024
Malicious code in @diotoborg/omnis-explicabo (npm)
- Sep 2, 2024
Malicious code in @diotoborg/officiis-optio (npm)
- Sep 2, 2024
Malicious code in @diotoborg/officia-ullam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/odit-nostrum-consequuntur (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nobis-quidem (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nihil-praesentium (npm)
- Sep 2, 2024
Malicious code in @diotoborg/necessitatibus-at (npm)
- Sep 2, 2024
Malicious code in @diotoborg/natus-odit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nam-quod (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nam-adipisci-fuga (npm)
- Sep 2, 2024
Malicious code in @diotoborg/molestias-voluptate (npm)
- Sep 2, 2024
Malicious code in @diotoborg/molestiae-perferendis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/libero-ratione-delectus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/libero-culpa-occaecati (npm)
- Sep 2, 2024
Malicious code in @diotoborg/laboriosam-in-nostrum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/labore-atque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/iusto-blanditiis-reiciendis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/iure-mollitia-modi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ipsam-dolores-labore (npm)
- Sep 2, 2024
Malicious code in @diotoborg/illo-quos (npm)
- Sep 2, 2024
Malicious code in @diotoborg/fugit-at-porro (npm)
- Sep 2, 2024
Malicious code in @diotoborg/facere-nihil (npm)
- Sep 2, 2024
Malicious code in @diotoborg/explicabo-vitae-velit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/excepturi-deserunt-eaque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eveniet-magnam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eveniet-eaque-fugit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eum-porro (npm)
Page 6563 of 7,307