Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,335 total · sorted newest first- Sep 2, 2024
Malicious code in @diotoborg/eius-voluptate (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eaque-reprehenderit-exercitationem (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eaque-illum-qui (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ea-consectetur (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolores-fugiat-autem (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolores-dolore (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolore-nesciunt (npm)
- Sep 2, 2024
Malicious code in @diotoborg/distinctio-a-doloremque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/deserunt-eum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/delectus-necessitatibus-voluptatum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/debitis-blanditiis-dolore (npm)
- Sep 2, 2024
Malicious code in @diotoborg/cupiditate-perferendis-repudiandae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/cum-saepe-minima (npm)
- Sep 2, 2024
Malicious code in @diotoborg/cum-iusto (npm)
- Sep 2, 2024
Malicious code in @diotoborg/consequatur-velit-quae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/consequatur-aut (npm)
- Sep 2, 2024
Malicious code in @diotoborg/blanditiis-fugiat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/autem-nam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/at-eos (npm)
- Sep 2, 2024
Malicious code in @diotoborg/assumenda-rem-iure (npm)
- Sep 2, 2024
Malicious code in @diotoborg/aliquam-perferendis-repudiandae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/alias-provident-fuga (npm)
- Sep 2, 2024
Malicious code in @diotoborg/accusamus-itaque-adipisci (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ab-facere (npm)
- Sep 2, 2024
Malicious code in @diotoborg/a-odio (npm)
- Sep 2, 2024
Malware in @diotoborg/perferendis-inventore
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/dolore-nesciunt
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/recusandae-reprehenderit
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/ratione-similique
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/incidunt-earum
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/ipsam-atque-eos
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/assumenda-rem-iure
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/occaecati-consectetur-possimus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/a-odio
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/delectus-necessitatibus-voluptatum
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/neque-pariatur
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/eaque-illum-qui
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/rem-alias
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/cum-saepe-minima
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/harum-vitae
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/molestiae-maxime
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/eaque-reprehenderit-exercitationem
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/odio-consequatur-corporis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/cupiditate-perferendis-repudiandae
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/fugiat-nobis-praesentium
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/officia-voluptate
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/maiores-corrupti
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/dolores-dolore
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/laboriosam-aut
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/autem-nam
1 compromised version
Page 6582 of 7,307