Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-react-u- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-u (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ty (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ts (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-to (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ti (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-th (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-te (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-td (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ta (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-t9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-t7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-t- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-t (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-su (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sty (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-stu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-stt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-str (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sto (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-stn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-stl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sti (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ste (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-std (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sta (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-st8 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-st- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-st (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ss (npm)
Page 5715 of 6,634