Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-v (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-u (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-t (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-s (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-r (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-q (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-p (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-o (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-n (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-m (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-l (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-k (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-j (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-i (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-h (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-g (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-f (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-e (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-d (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-c (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-b (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-a (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmus (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmun (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmui (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qms (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qml (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qme (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qma (npm)
Page 5722 of 6,634