Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-po (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ph (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-p5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-p2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-p (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-iz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ix (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-iv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-iu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-it (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-is (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ir (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ip (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-io (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-in (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-im (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-il (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ik (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ii (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ih (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ig (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-if (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ie (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-id (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ic (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ib (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ia (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-i1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-i- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-i (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-d3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-b (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-as (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ar (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-aq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ap (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ao (npm)
Page 5717 of 6,634