Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,335 total · sorted newest first- Sep 2, 2024
Malware in @diotoborg/ad-veritatis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/a-quas
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/fuga-molestias
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/autem-id
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/voluptatibus-tempore
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/labore-aspernatur-nobis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/modi-consequatur
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/sed-beatae
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/minima-omnis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/explicabo-pariatur
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/odio-architecto-ut
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/provident-voluptatibus-sunt
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/dignissimos-aliquam
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/facilis-pariatur
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/nobis-facilis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/facilis-perferendis
1 compromised version
- Sep 2, 2024
Malicious code in @diotoborg/voluptates-quos-esse (npm)
- Sep 2, 2024
Malicious code in @diotoborg/temporibus-nam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/suscipit-doloribus-velit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/sequi-molestias-ullam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/rerum-occaecati (npm)
- Sep 2, 2024
Malicious code in @diotoborg/repellendus-doloribus-itaque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/rem-officia (npm)
- Sep 2, 2024
Malicious code in @diotoborg/rem-alias (npm)
- Sep 2, 2024
Malicious code in @diotoborg/recusandae-reprehenderit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ratione-similique (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quos-accusantium (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quia-harum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quasi-repellat-odit (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quae-nesciunt (npm)
- Sep 2, 2024
Malicious code in @diotoborg/provident-ipsam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/placeat-ea-autem (npm)
- Sep 2, 2024
Malicious code in @diotoborg/perspiciatis-voluptates-alias (npm)
- Sep 2, 2024
Malicious code in @diotoborg/perferendis-inventore (npm)
- Sep 2, 2024
Malicious code in @diotoborg/omnis-necessitatibus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/officia-voluptate (npm)
- Sep 2, 2024
Malicious code in @diotoborg/odio-consequatur-corporis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/occaecati-consectetur-possimus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/nulla-hic (npm)
- Sep 2, 2024
Malicious code in @diotoborg/neque-pariatur (npm)
- Sep 2, 2024
Malicious code in @diotoborg/molestiae-maxime (npm)
- Sep 2, 2024
Malicious code in @diotoborg/modi-sapiente (npm)
- Sep 2, 2024
Malicious code in @diotoborg/maiores-corrupti (npm)
- Sep 2, 2024
Malicious code in @diotoborg/laboriosam-aut (npm)
- Sep 2, 2024
Malicious code in @diotoborg/iusto-molestiae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ipsam-atque-eos (npm)
- Sep 2, 2024
Malicious code in @diotoborg/incidunt-earum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/harum-vitae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/fugiat-nobis-praesentium (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eum-est-nulla (npm)
Page 6581 of 7,307