Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jul 4, 2024
Malware in @zitterorg/at-esse-dolorum
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/placeat-nemo
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/ex-dolorum
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/enim-earum-maiores
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/cum-ipsum-beatae
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/iure-consequatur-nostrum
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/magni-dolorum
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/laborum-nobis
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/ullam-veniam
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/consectetur-impedit
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/nihil-illo-minima
1 compromised version
- Jul 4, 2024
Malware in @zitterorg/neque-veritatis
1 compromised version
- Jul 4, 2024
Malicious code in @zitterorg/voluptate-aliquam (npm)
- Jul 4, 2024
Malicious code in @zitterorg/vitae-blanditiis-eum (npm)
- Jul 4, 2024
Malicious code in @zitterorg/vero-possimus (npm)
- Jul 4, 2024
Malicious code in @zitterorg/ut-ex (npm)
- Jul 4, 2024
Malicious code in @zitterorg/repellendus-ducimus (npm)
- Jul 4, 2024
Malicious code in @zitterorg/quia-quasi-voluptas (npm)
- Jul 4, 2024
Malicious code in @zitterorg/quaerat-vitae-sed (npm)
- Jul 4, 2024
Malicious code in @zitterorg/praesentium-voluptatum (npm)
- Jul 4, 2024
Malicious code in @zitterorg/perferendis-aperiam (npm)
- Jul 4, 2024
Malicious code in @zitterorg/pariatur-asperiores (npm)
- Jul 4, 2024
Malicious code in @zitterorg/odio-itaque-harum (npm)
- Jul 4, 2024
Malicious code in @zitterorg/numquam-assumenda (npm)
- Jul 4, 2024
Malicious code in @zitterorg/nostrum-voluptatibus (npm)
- Jul 4, 2024
Malicious code in @zitterorg/nobis-possimus (npm)
- Jul 4, 2024
Malicious code in @zitterorg/nisi-veniam (npm)
- Jul 4, 2024
Malicious code in @zitterorg/nemo-distinctio (npm)
- Jul 4, 2024
Malicious code in @zitterorg/natus-eos-vel (npm)
- Jul 4, 2024
Malicious code in @zitterorg/modi-quaerat-voluptas (npm)
- Jul 4, 2024
Malicious code in @zitterorg/minus-itaque-odit (npm)
- Jul 4, 2024
Malicious code in @zitterorg/maxime-tenetur (npm)
- Jul 4, 2024
Malicious code in @zitterorg/iusto-ipsum (npm)
- Jul 4, 2024
Malicious code in @zitterorg/itaque-quae-dolore (npm)
- Jul 4, 2024
Malicious code in @zitterorg/iste-veritatis (npm)
- Jul 4, 2024
Malicious code in @zitterorg/ipsam-deserunt (npm)
- Jul 4, 2024
Malicious code in @zitterorg/inventore-at-sit (npm)
- Jul 4, 2024
Malicious code in @zitterorg/incidunt-cum (npm)
- Jul 4, 2024
Malicious code in @zitterorg/in-labore-ratione (npm)
- Jul 4, 2024
Malicious code in @zitterorg/illum-recusandae (npm)
- Jul 4, 2024
Malicious code in @zitterorg/illo-accusantium (npm)
- Jul 4, 2024
Malicious code in @zitterorg/eum-veritatis-placeat (npm)
- Jul 4, 2024
Malicious code in @zitterorg/error-quisquam (npm)
- Jul 4, 2024
Malicious code in @zitterorg/eos-beatae-aliquid (npm)
- Jul 4, 2024
Malicious code in @zitterorg/eius-sint-sunt (npm)
- Jul 4, 2024
Malicious code in @zitterorg/dolorem-quibusdam-dicta (npm)
- Jul 4, 2024
Malicious code in @zitterorg/deserunt-dolorum-reiciendis (npm)
- Jul 4, 2024
Malicious code in @zitterorg/delectus-nostrum-doloribus (npm)
- Jul 4, 2024
Malicious code in @zitterorg/consectetur-quos (npm)
- Jul 4, 2024
Malicious code in @zitterorg/commodi-eum (npm)
Page 6610 of 7,293