Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-oz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-oy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ox (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ow (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ov (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ou (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ost (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-oss (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-oso (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ose (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-os_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-os3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-os2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-os- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-os (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-oq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-oo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-onz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ony (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-onx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-onw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-onv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-on (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omu (npm)
Page 5734 of 6,634