Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-promisee (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promised (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisec (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promiseb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisea (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promise_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promise4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promise2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promise- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promise (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promis- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prome (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-projz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-projx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-proju (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-projt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-projs (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-projo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-projn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-projm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-projl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-projj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-proji (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-projg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-projf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-projex (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-projet (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-projen (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-projek (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-projeh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-projed (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-projec (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-proje- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-proje (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-projd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-projc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-projb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-proja (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-proj_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-proj4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-proj3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-proj2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-proj1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-proj- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-proj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prob (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-priz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-priy (npm)
Page 5724 of 6,634