Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plug (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-pl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-p (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-m (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-f (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-b (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-a (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodeba (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodeb- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodeb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodea (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-z (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-y (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-x (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-w (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-v (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-u (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-t (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-sy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-sx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-sw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-sv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-su (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-st (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-ss (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-sr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-sq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-sp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-so (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-sn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-sm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-sl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-sk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-sj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-si (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-sh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-sg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-s (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-s (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-l (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-k (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-j (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-i (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-h (npm)
Page 5737 of 6,634