Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-omt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-oms (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-oml (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ome (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-oma (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-om_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-om4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-om2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-om- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-om (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-oj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-oi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-og (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-of (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-oe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-od (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-oa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-o9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-o8 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-o7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-o6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-o5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-o4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-o3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-o1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-o0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-o- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-o (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodev (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodejsw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodejst (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodejsr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodejsp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodejsn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodejsa (npm)
Page 5735 of 6,634