Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-parsa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pars (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-paro (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-park (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pari (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pare (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pard (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-para (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-par_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-par7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-par- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pany (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-panx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-panw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-panv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-panu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pant (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pans (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-panr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pano (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pann (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-panm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-panl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pank (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-panj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pani (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-panh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pang (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-panf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pane (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pand (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-panc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-panb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pana (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pan6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pan (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagez (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagey (npm)
Page 5732 of 6,634