Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-so (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-si (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-se (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-s3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-s- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-s (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ru (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rs (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ro (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ri (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-r (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-py (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-px (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ps (npm)
Page 5716 of 6,634