Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-g (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-f (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-e (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-d (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-c (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-b (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-a (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-conti (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-conta (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-conf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-com (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-col (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-cm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-cl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-ci (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-ch (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-cb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-ca (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-b (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-a (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-rec (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-reb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-rea (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-rd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-rc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-rb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-ra (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-r_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-r3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-r2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-r- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-q (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-p (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-o (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-n (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-m (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-l (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-k (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-j (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-i (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-h (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-g (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-f (npm)
Page 5738 of 6,634