Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,335 total · sorted newest first- Sep 2, 2024
Malicious code in @diotoborg/nihil-eveniet-quisquam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nesciunt-veniam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nam-voluptates-in (npm)
- Sep 2, 2024
Malicious code in @diotoborg/mollitia-iste (npm)
- Sep 2, 2024
Malicious code in @diotoborg/molestias-quis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/minus-culpa (npm)
- Sep 2, 2024
Malicious code in @diotoborg/maiores-quae-quia (npm)
- Sep 2, 2024
Malicious code in @diotoborg/maiores-natus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/laudantium-itaque-esse (npm)
- Sep 2, 2024
Malicious code in @diotoborg/labore-placeat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/itaque-officiis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/itaque-incidunt-optio (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ipsam-sequi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ipsa-error (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ipsa-deleniti-ab (npm)
- Sep 2, 2024
Malicious code in @diotoborg/incidunt-animi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/illum-consequuntur (npm)
- Sep 2, 2024
Malicious code in @diotoborg/fuga-nihil (npm)
- Sep 2, 2024
Malicious code in @diotoborg/excepturi-incidunt (npm)
- Sep 2, 2024
Malicious code in @diotoborg/excepturi-ad (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eveniet-pariatur-esse (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eum-nostrum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eum-ab (npm)
- Sep 2, 2024
Malicious code in @diotoborg/est-unde-excepturi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/esse-rerum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eos-eum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/enim-veritatis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ducimus-ducimus-sed (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolorum-saepe (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolorum-autem (npm)
- Sep 2, 2024
Malicious code in @diotoborg/doloribus-provident (npm)
- Sep 2, 2024
Malicious code in @diotoborg/doloribus-minima-velit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolores-iusto (npm)
- Sep 2, 2024
Malicious code in @diotoborg/deleniti-culpa (npm)
- Sep 2, 2024
Malicious code in @diotoborg/cum-ab (npm)
- Sep 2, 2024
Malicious code in @diotoborg/autem-dolor (npm)
- Sep 2, 2024
Malicious code in @diotoborg/atque-mollitia-consequuntur (npm)
- Sep 2, 2024
Malicious code in @diotoborg/aperiam-cum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/aliquid-non (npm)
- Sep 2, 2024
Malicious code in @diotoborg/adipisci-soluta (npm)
- Sep 2, 2024
Malware in @diotoborg/sapiente-nihil-sunt
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/doloribus-provident
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/voluptatem-quod-magnam
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/mollitia-iste
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/atque-mollitia-consequuntur
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/perspiciatis-placeat-cum
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/non-atque
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quibusdam-vero
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/nihil-laboriosam
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/perspiciatis-blanditiis
1 compromised version
Page 6573 of 7,307