Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,335 total · sorted newest first- Sep 2, 2024
Malicious code in @diotoborg/necessitatibus-temporibus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/natus-facere-esse (npm)
- Sep 2, 2024
Malicious code in @diotoborg/mollitia-tempore (npm)
- Sep 2, 2024
Malicious code in @diotoborg/molestiae-ratione-tempora (npm)
- Sep 2, 2024
Malicious code in @diotoborg/magnam-dolorem (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ipsa-magni-debitis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/inventore-beatae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/harum-vitae-nobis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/harum-neque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/fugiat-doloremque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/fugiat-distinctio (npm)
- Sep 2, 2024
Malicious code in @diotoborg/facilis-nihil-quae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eveniet-fugiat-ex (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eum-pariatur (npm)
- Sep 2, 2024
Malicious code in @diotoborg/et-facere-iusto (npm)
- Sep 2, 2024
Malicious code in @diotoborg/esse-distinctio-repellat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/esse-accusantium-ratione (npm)
- Sep 2, 2024
Malicious code in @diotoborg/enim-molestias (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eligendi-est-unde (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eaque-maxime (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolores-velit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolore-sint-deserunt (npm)
- Sep 2, 2024
Malicious code in @diotoborg/deserunt-illo-tempora (npm)
- Sep 2, 2024
Malicious code in @diotoborg/deleniti-totam-suscipit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/culpa-at-cumque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/corporis-similique-commodi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/corporis-repellat-dicta (npm)
- Sep 2, 2024
Malicious code in @diotoborg/consectetur-tempora-quia (npm)
- Sep 2, 2024
Malicious code in @diotoborg/consectetur-assumenda (npm)
- Sep 2, 2024
Malicious code in @diotoborg/commodi-voluptatum-libero (npm)
- Sep 2, 2024
Malicious code in @diotoborg/commodi-aut (npm)
- Sep 2, 2024
Malicious code in @diotoborg/beatae-culpa (npm)
- Sep 2, 2024
Malicious code in @diotoborg/at-vitae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/at-exercitationem-esse (npm)
- Sep 2, 2024
Malicious code in @diotoborg/aspernatur-eaque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/architecto-quis-asperiores (npm)
- Sep 2, 2024
Malicious code in @diotoborg/accusantium-reprehenderit-commodi (npm)
- Sep 2, 2024
Malware in @diotoborg/at-vitae
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/eligendi-est-unde
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/mollitia-tempore
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/natus-facere-esse
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/perferendis-odit
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/consectetur-assumenda
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/enim-molestias
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/eum-pariatur
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/neque-inventore-corporis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/harum-neque
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/sed-minus-itaque
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/beatae-culpa
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/fugiat-doloremque
1 compromised version
Page 6576 of 7,307