Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,335 total · sorted newest first- Sep 2, 2024
Malicious code in @diotoborg/modi-ducimus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/maxime-iste (npm)
- Sep 2, 2024
Malicious code in @diotoborg/libero-debitis-possimus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/laborum-recusandae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/itaque-ratione-beatae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/harum-nesciunt-dolores (npm)
- Sep 2, 2024
Malicious code in @diotoborg/fuga-rem-inventore (npm)
- Sep 2, 2024
Malicious code in @diotoborg/facere-cupiditate (npm)
- Sep 2, 2024
Malicious code in @diotoborg/explicabo-error-porro (npm)
- Sep 2, 2024
Malicious code in @diotoborg/exercitationem-culpa (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolorum-unde (npm)
- Sep 2, 2024
Malicious code in @diotoborg/doloribus-error (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolore-id (npm)
- Sep 2, 2024
Malicious code in @diotoborg/distinctio-sed (npm)
- Sep 2, 2024
Malicious code in @diotoborg/distinctio-quia (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dignissimos-officiis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/cum-illum (npm)
- Sep 2, 2024
Malicious code in @diotoborg/culpa-eum-laudantium (npm)
- Sep 2, 2024
Malicious code in @diotoborg/aut-illo (npm)
- Sep 2, 2024
Malicious code in @diotoborg/assumenda-saepe-mollitia (npm)
- Sep 2, 2024
Malicious code in @diotoborg/architecto-at (npm)
- Sep 2, 2024
Malicious code in @diotoborg/accusamus-nesciunt (npm)
- Sep 2, 2024
Malware in @diotoborg/quas-veritatis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/voluptas-saepe-officia
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quia-nulla
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/vero-atque
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/totam-explicabo
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/dignissimos-officiis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/harum-nesciunt-dolores
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/necessitatibus-qui
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quaerat-eius
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/exercitationem-culpa
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/assumenda-saepe-mollitia
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/dolore-id
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/distinctio-sed
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/optio-provident-omnis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/itaque-ratione-beatae
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/occaecati-porro
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/distinctio-quia
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/doloribus-error
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/perspiciatis-totam
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quod-voluptatibus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/aut-illo
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/recusandae-omnis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/explicabo-error-porro
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/architecto-at
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/sit-omnis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/accusamus-nesciunt
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/repellendus-est
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/modi-ducimus
1 compromised version
Page 6584 of 7,307