Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-prei (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-preh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-preg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pref (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pree (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pred (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prec (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-preb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prea (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pre_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pre2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pre- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pre (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-poz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-poy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pox (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pow (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pov (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pou (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pot (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posty (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-postx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-postw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-postv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-postu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-postt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posts (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-postr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-postq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-postp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posto (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-post (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-poss (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-poso (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pose (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pos_ (npm)
Page 5726 of 6,634