Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,336 total · sorted newest first- Sep 2, 2024
Malware in @diotoborg/vitae-quo
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/ullam-neque-voluptates
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/odit-nostrum-consequuntur
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/eveniet-magnam
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/praesentium-architecto
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/natus-odit
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/suscipit-amet
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/officia-ullam
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/eius-pariatur
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/nobis-quidem
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/temporibus-dicta
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/fugit-at-porro
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quod-similique-iusto
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quaerat-tempore
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/accusamus-nam
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/aperiam-voluptatibus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/aliquam-dolorum-ipsa
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/molestias-voluptate
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/beatae-illo
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/libero-culpa-occaecati
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/nam-quod
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/labore-atque
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/consequuntur-laborum
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/dignissimos-placeat
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/sit-et-quibusdam
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/aliquam-aperiam
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/officiis-optio
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quo-dolorem-ducimus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/voluptatum-veritatis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/molestiae-perferendis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/nihil-praesentium
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/illo-quos
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/excepturi-deserunt-eaque
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/rem-minima
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/eum-porro
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/omnis-explicabo
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/libero-ratione-delectus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/iusto-blanditiis-reiciendis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/vero-quaerat
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/ipsam-dolores-labore
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/est-ad
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/ad-tenetur-eveniet
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/facere-nihil
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quis-placeat
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/distinctio-voluptates-deleniti
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/laboriosam-in-nostrum
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/aliquam-commodi-ducimus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/voluptate-fuga
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/soluta-cupiditate-nobis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/provident-enim-animi
1 compromised version
Page 6565 of 7,307