Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,336 total · sorted newest first- Sep 2, 2024
Malware in @diotoborg/officiis-soluta
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/consequatur-sunt
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/doloremque-tempore-harum
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/occaecati-quibusdam
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/tenetur-nobis-maiores
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/beatae-possimus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/corrupti-quos-quo
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/distinctio-vel
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quas-quo
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/natus-delectus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/inventore-quasi
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/aspernatur-id
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/magnam-incidunt-quasi
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/earum-vero
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/atque-voluptatum-maxime
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/dolorum-iste-excepturi
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/sed-tempora-natus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/minus-alias-quisquam
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/possimus-perspiciatis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/aliquam-quod-at
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/eum-sunt
1 compromised version
- Sep 2, 2024
Malicious code in @diotoborg/voluptatum-quae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/voluptatibus-officiis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/voluptatem-quod-magnam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/vero-sit-doloribus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/temporibus-fugiat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/tempore-beatae-debitis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/soluta-amet-enim (npm)
- Sep 2, 2024
Malicious code in @diotoborg/sequi-perspiciatis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/sapiente-nihil-sunt (npm)
- Sep 2, 2024
Malicious code in @diotoborg/rerum-mollitia (npm)
- Sep 2, 2024
Malicious code in @diotoborg/rem-unde-sunt (npm)
- Sep 2, 2024
Malicious code in @diotoborg/reiciendis-placeat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/reiciendis-molestias (npm)
- Sep 2, 2024
Malicious code in @diotoborg/recusandae-impedit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ratione-velit-quaerat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quod-atque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quisquam-libero (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quis-soluta-nesciunt (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quis-facere-repudiandae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quibusdam-vero (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quibusdam-libero (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quaerat-dicta (npm)
- Sep 2, 2024
Malicious code in @diotoborg/perspiciatis-placeat-cum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/perspiciatis-blanditiis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/officiis-ratione-facilis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/odio-pariatur (npm)
- Sep 2, 2024
Malicious code in @diotoborg/odio-dolores-officia (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nostrum-eveniet-officiis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/non-atque (npm)
Page 6572 of 7,307