Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-qm_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qm9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qm7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qm2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qm- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ql (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qiz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qiy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qix (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qiw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qiv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qiu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-q (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-py (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-px (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-puz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-puy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pux (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ps (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prou (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promish (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisey (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisex (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisew (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promiseu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promiset (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promises (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promiser (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promiseq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisep (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promiseo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisen (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisem (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisel (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisej (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisei (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promiseh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promiseg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisef (npm)
Page 5723 of 6,634