Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,336 total · sorted newest first- Sep 2, 2024
Malicious code in @diotoborg/explicabo-laboriosam-maxime (npm)
- Sep 2, 2024
Malicious code in @diotoborg/exercitationem-et (npm)
- Sep 2, 2024
Malicious code in @diotoborg/excepturi-fuga-sequi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eveniet-officia (npm)
- Sep 2, 2024
Malicious code in @diotoborg/et-voluptatum-mollitia (npm)
- Sep 2, 2024
Malicious code in @diotoborg/est-necessitatibus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/enim-explicabo-saepe (npm)
- Sep 2, 2024
Malicious code in @diotoborg/earum-eum-doloribus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ea-praesentium (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ducimus-eveniet (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolorum-tempora (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolorum-dolorum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolorum-atque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolores-voluptates (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolore-odio-est (npm)
- Sep 2, 2024
Malicious code in @diotoborg/delectus-voluptatibus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/cumque-velit-eius (npm)
- Sep 2, 2024
Malicious code in @diotoborg/culpa-amet-totam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/corrupti-beatae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/corporis-optio-tenetur (npm)
- Sep 2, 2024
Malicious code in @diotoborg/consequuntur-laboriosam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/consectetur-consequuntur (npm)
- Sep 2, 2024
Malicious code in @diotoborg/beatae-ad-voluptatem (npm)
- Sep 2, 2024
Malicious code in @diotoborg/atque-dolorem-ratione (npm)
- Sep 2, 2024
Malicious code in @diotoborg/aspernatur-nihil (npm)
- Sep 2, 2024
Malicious code in @diotoborg/asperiores-similique-quasi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/asperiores-placeat-officia (npm)
- Sep 2, 2024
Malicious code in @diotoborg/aperiam-amet-natus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ad-aliquid (npm)
- Sep 2, 2024
Malware in @diotoborg/asperiores-similique-quasi
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/culpa-amet-totam
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quas-fugiat
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/dolore-odio-est
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/in-explicabo
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/ea-praesentium
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/dolorum-dolorum
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/explicabo-laboriosam-maxime
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/enim-explicabo-saepe
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/porro-modi-accusamus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/recusandae-non
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/officia-iste
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quo-laudantium-beatae
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quia-ad-a
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/consectetur-consequuntur
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/asperiores-placeat-officia
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/odio-accusantium
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/magni-illo
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/itaque-asperiores
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/nemo-voluptatibus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/corrupti-beatae
1 compromised version
Page 6567 of 7,307