Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-pos2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pos- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pos (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-por (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-poq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pop (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-poo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pon (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-poj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-poh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pog (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pof (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-poe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pod (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-poc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pob (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-poa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-po9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-po6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-po3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-po2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-po- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-po (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-piz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-piy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pix (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-piw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-piv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-piu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pit (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pis (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pir (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-piq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pip (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pio (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pinz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-piny (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pinx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pinw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pinv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pinu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pint (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pins (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pinp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pino (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pinn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pinm (npm)
Page 5727 of 6,634