Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-react-an (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-am (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-al (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ak (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-aj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ai (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ah (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ag (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-af (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ae (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ad (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ac (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ab (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-aa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-a2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-a1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-a- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-8 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-rann (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-rang (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-rands (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randox (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randow (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randov (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randot (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randos (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randor (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randop (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randoo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randon (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randomz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randomy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randomx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randomw (npm)
Page 5718 of 6,634