Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,335 total · sorted newest first- Sep 2, 2024
Malware in @diotoborg/libero-debitis-possimus
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/dolorum-unde
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/cum-illum
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/fuga-rem-inventore
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/maxime-iste
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/nulla-ut
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/facere-cupiditate
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/culpa-eum-laudantium
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/repellat-tenetur-cupiditate
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/laborum-recusandae
1 compromised version
- Sep 2, 2024
Malicious code in @diotoborg/vero-eligendi-deleniti (npm)
- Sep 2, 2024
Malicious code in @diotoborg/verbose-robot (npm)
- Sep 2, 2024
Malicious code in @diotoborg/velit-placeat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/vel-labore-incidunt (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quo-neque (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quis-fugit-possimus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/quia-eaque-molestiae (npm)
- Sep 2, 2024
Malicious code in @diotoborg/provident-accusamus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/placeat-placeat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/non-reiciendis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/necessitatibus-voluptas-iusto (npm)
- Sep 2, 2024
Malicious code in @diotoborg/necessitatibus-nam-tempora (npm)
- Sep 2, 2024
Malicious code in @diotoborg/illum-ad-corporis (npm)
- Sep 2, 2024
Malicious code in @diotoborg/illo-placeat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/fuga-sequi (npm)
- Sep 2, 2024
Malicious code in @diotoborg/ex-repellat (npm)
- Sep 2, 2024
Malicious code in @diotoborg/eum-tempora-distinctio (npm)
- Sep 2, 2024
Malicious code in @diotoborg/est-voluptate (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolorem-possimus (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolor-iure (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dolor-earum-quia (npm)
- Sep 2, 2024
Malicious code in @diotoborg/dicta-recusandae-veniam (npm)
- Sep 2, 2024
Malicious code in @diotoborg/consequuntur-dolorem-dicta (npm)
- Sep 2, 2024
Malicious code in @diotoborg/aliquid-quae-dicta (npm)
- Sep 2, 2024
Malicious code in @diotoborg/aliquam-sit-sed (npm)
- Sep 2, 2024
Malware in @diotoborg/necessitatibus-voluptas-iusto
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/est-voluptate
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/placeat-placeat
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/fuga-sequi
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/illo-placeat
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/vero-eligendi-deleniti
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/aliquam-sit-sed
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/vel-labore-incidunt
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/consequuntur-dolorem-dicta
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/dicta-recusandae-veniam
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/quo-neque
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/non-reiciendis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/illum-ad-corporis
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/eum-tempora-distinctio
1 compromised version
- Sep 2, 2024
Malware in @diotoborg/dolor-iure
1 compromised version
Page 6585 of 7,307