Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-passporte (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passporta (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-z (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-y (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-x (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-w (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-v (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-u (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-t (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-s (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-r (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-q (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-p (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-o (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-n (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-m (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-l (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-k (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-j (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-i (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-h (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-g (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-f (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-e (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passpor (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passpo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pass (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-paso (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pask (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pash (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pase (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pas- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pas (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parw (npm)
Page 5730 of 6,634