Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-pinl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pink (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pinj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pini (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pinh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ping (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pinf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pine (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pind (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pinc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pinb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pina (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pin_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pin- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pin (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pim (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pil (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pik (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pij (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pii (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pih (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pig (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pif (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pie (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pid (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pic (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pib (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pia (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pi_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pi4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pi2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pi0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pi- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pho (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-phi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ph7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ph3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ph1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ph0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ph- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pez (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pey (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pex (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pew (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pev (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-peu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pet (npm)
Page 5728 of 6,634