Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-pe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pds (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pde (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pda (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pd_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pd6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pd4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pd- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-past (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passs (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passpz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passpw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passpr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passports (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passportn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passportj (npm)
Page 5729 of 6,634