Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-random-d (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-random-c (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-random-b (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-random-a (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-random-4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-random-2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-random-0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-random-- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-random- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-random (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randol (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randoi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randof (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randoc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-rando_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-rando- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-rando (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-rande (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-randa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-rand_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-rand6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-rand4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-rand3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-rand2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-rand1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-rand0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-rand- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-rand (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ran- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-raj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-rad (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-r_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-r2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-quen (npm)
Page 5720 of 6,634