Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-quel (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-quek (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-quef (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-quee (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qued (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-quec (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-queb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-quea (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-que1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-que- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qud (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-quc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qub (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-quaz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-quay (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-quav (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-quat (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-quas (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-quar (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-quan (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-quam (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qual (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-quak (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-quai (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-quah (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-quag (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-quaf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-quae (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-quad (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-quac (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-quab (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qua9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qua- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qua (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qu9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qu4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qu1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qu- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qs (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-y (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-w (npm)
Page 5721 of 6,634