Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-packagex (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagew (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagev (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packageu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packaget (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packages (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packager (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagep (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packageo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagen (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagem (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagel (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagek (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagej (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagei (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packageh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packageg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagef (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagee (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packaged (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagec (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packageb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagea (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-package_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-package9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-package8 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-package7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-package6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-package5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-package4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-package3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-package2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-package1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-package0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-package- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-package (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-paa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-p_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-p9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-p8 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-p7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-p6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-p5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-p4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-p3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-p2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-p1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-p0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-p- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-p (npm)
Page 5733 of 6,634