Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,335 total · sorted newest first- Sep 2, 2024
Malware in @diotoborg/labore-placeat
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quis-soluta-nesciunt
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/ducimus-ducimus-sed
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/eveniet-pariatur-esse
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quibusdam-libero
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/illum-consequuntur
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/rerum-mollitia
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quod-atque
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/ipsa-error
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/maiores-natus
1 compromised version
- Sep 2, 2024
Malicious code in @diotoborg/voluptatibus-impedit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/vero-ab (npm)
- Sep 2, 2024
Malicious code in @diotoborg/veritatis-sapiente (npm)
- Sep 2, 2024
Malicious code in @diotoborg/veritatis-nihil-vero (npm)
- Sep 2, 2024
Malicious code in @diotoborg/veniam-soluta (npm)
- Sep 2, 2024
Malicious code in @diotoborg/velit-nulla (npm)
- Sep 2, 2024
Malicious code in @diotoborg/velit-maiores-voluptatibus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ullam-dignissimos-repudiandae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/tenetur-nisi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/temporibus-id (npm)
- Sep 2, 2024
Malicious code in @diotoborg/tempore-ad-veritatis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/sunt-totam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/sunt-necessitatibus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/sunt-iure (npm)
- Sep 2, 2024
Malicious code in @diotoborg/sed-minus-itaque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/sed-doloremque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/rerum-similique-ex (npm)
- Sep 2, 2024
Malicious code in @diotoborg/rerum-excepturi-nostrum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ratione-error-odio (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quos-eos (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quis-tempore-distinctio (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quidem-debitis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quia-voluptatum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quasi-sint (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quasi-neque-qui (npm)
- Sep 2, 2024
Malicious code in @diotoborg/provident-repellat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/provident-consequuntur (npm)
- Sep 2, 2024
Malicious code in @diotoborg/placeat-molestias (npm)
- Sep 2, 2024
Malicious code in @diotoborg/perferendis-odit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/perferendis-illo-facilis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/officiis-nam-dignissimos (npm)
- Sep 2, 2024
Malicious code in @diotoborg/odit-architecto-aliquam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/numquam-veritatis-error (npm)
- Sep 2, 2024
Malicious code in @diotoborg/numquam-illum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nulla-tempora-voluptate (npm)
- Sep 2, 2024
Malicious code in @diotoborg/non-voluptatum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nobis-aut-deleniti (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nisi-quo-in (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nesciunt-ullam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/neque-inventore-corporis (npm)
Page 6575 of 7,307