Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-prix (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-priw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-priv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-priu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prit (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pris (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prir (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-priq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prip (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prio (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prin (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prim (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prij (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prif (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prie (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prid (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pric (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pria (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pri_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pri9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pri2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pri- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pri (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prez (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prey (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prex (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prew (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prev (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-preu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pretz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prety (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pretu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prett (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prets (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pretr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-preto (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-preti (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prete (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-preta (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pret- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pret (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pres (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prer (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-preq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prep (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-preo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pren (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prem (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prel (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prej (npm)
Page 5725 of 6,634