Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,336 total · sorted newest first- Sep 2, 2024
Malware in @diotoborg/tempora-voluptas-distinctio
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/exercitationem-et
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/soluta-in
1 compromised version
- Sep 2, 2024
Malicious code in @diotoborg/voluptatibus-earum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/veritatis-qui (npm)
- Sep 2, 2024
Malicious code in @diotoborg/velit-labore (npm)
- Sep 2, 2024
Malicious code in @diotoborg/tenetur-nobis-maiores (npm)
- Sep 2, 2024
Malicious code in @diotoborg/tenetur-hic (npm)
- Sep 2, 2024
Malicious code in @diotoborg/tenetur-eos-commodi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/sit-illo (npm)
- Sep 2, 2024
Malicious code in @diotoborg/sequi-aperiam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/sed-tempora-natus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/repellat-laboriosam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/repellat-blanditiis-quis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/rem-rerum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/rem-eum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quos-vero-asperiores (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quos-praesentium (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quis-dolor-laborum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/qui-at (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quas-quo (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quaerat-aut-corporis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quae-optio-culpa (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quae-dolorum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/possimus-perspiciatis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/perspiciatis-doloribus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/officiis-soluta (npm)
- Sep 2, 2024
Malicious code in @diotoborg/officia-labore (npm)
- Sep 2, 2024
Malicious code in @diotoborg/occaecati-quibusdam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nostrum-nostrum-ipsum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/non-hic-magnam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nisi-suscipit-vel (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nisi-eaque-eaque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/necessitatibus-provident-adipisci (npm)
- Sep 2, 2024
Malicious code in @diotoborg/natus-similique-nemo (npm)
- Sep 2, 2024
Malicious code in @diotoborg/natus-delectus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nam-occaecati (npm)
- Sep 2, 2024
Malicious code in @diotoborg/minus-alias-quisquam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/maiores-nihil (npm)
- Sep 2, 2024
Malicious code in @diotoborg/magnam-incidunt-quasi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/libero-asperiores-at (npm)
- Sep 2, 2024
Malicious code in @diotoborg/laudantium-numquam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/laudantium-labore-alias (npm)
- Sep 2, 2024
Malicious code in @diotoborg/itaque-consequuntur (npm)
- Sep 2, 2024
Malicious code in @diotoborg/itaque-aliquid-quisquam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/iste-laborum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ipsa-ratione (npm)
- Sep 2, 2024
Malicious code in @diotoborg/inventore-quasi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/facilis-totam-atque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/facere-accusamus (npm)
Page 6569 of 7,307