Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,336 total · sorted newest first- Sep 2, 2024
Malicious code in @diotoborg/eum-sunt (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eum-deleniti-tempora (npm)
- Sep 2, 2024
Malicious code in @diotoborg/error-nesciunt-qui (npm)
- Sep 2, 2024
Malicious code in @diotoborg/earum-vero (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eaque-iste (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolorum-iste-excepturi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolorum-ipsam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/doloribus-sapiente-voluptatum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolores-esse-incidunt (npm)
- Sep 2, 2024
Malicious code in @diotoborg/doloremque-tempore-harum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/doloremque-asperiores (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolor-tempora-fuga (npm)
- Sep 2, 2024
Malicious code in @diotoborg/distinctio-vel (npm)
- Sep 2, 2024
Malicious code in @diotoborg/deleniti-cum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/cumque-sequi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/cumque-repellat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/corrupti-quos-quo (npm)
- Sep 2, 2024
Malicious code in @diotoborg/corporis-voluptatum-saepe (npm)
- Sep 2, 2024
Malicious code in @diotoborg/consequuntur-rem (npm)
- Sep 2, 2024
Malicious code in @diotoborg/consequatur-sunt (npm)
- Sep 2, 2024
Malicious code in @diotoborg/consequatur-facilis-qui (npm)
- Sep 2, 2024
Malicious code in @diotoborg/beatae-possimus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/autem-suscipit-unde (npm)
- Sep 2, 2024
Malicious code in @diotoborg/aut-officiis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/atque-voluptatum-maxime (npm)
- Sep 2, 2024
Malicious code in @diotoborg/at-totam-perspiciatis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/aspernatur-in (npm)
- Sep 2, 2024
Malicious code in @diotoborg/aspernatur-id (npm)
- Sep 2, 2024
Malicious code in @diotoborg/asperiores-maiores-velit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/amet-cum-culpa (npm)
- Sep 2, 2024
Malicious code in @diotoborg/amet-architecto-est (npm)
- Sep 2, 2024
Malicious code in @diotoborg/aliquam-ut (npm)
- Sep 2, 2024
Malicious code in @diotoborg/aliquam-quod-at (npm)
- Sep 2, 2024
Malicious code in @diotoborg/alias-amet (npm)
- Sep 2, 2024
Malicious code in @diotoborg/adipisci-placeat-iure (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ad-rerum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ab-harum (npm)
- Sep 2, 2024
Malware in @diotoborg/aut-officiis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/itaque-consequuntur
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/laudantium-labore-alias
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quaerat-aut-corporis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/deleniti-cum
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/ad-rerum
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/perspiciatis-doloribus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/nisi-eaque-eaque
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/qui-at
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/ipsa-ratione
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/aliquam-ut
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/tenetur-eos-commodi
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/veritatis-qui
1 compromised version
Page 6570 of 7,307