Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-ngxo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngxm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngxj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngxi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngxf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngxe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngxd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngxc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngxb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngxa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx8 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx-z (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx-y (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx-x (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx-w (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx-v (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx-u (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx-t (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx-s (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx-r (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx-q (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx-p (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx-o (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx-n (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx-m (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx-l (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx-k (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx-j (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx-i (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx-h (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx-g (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx-f (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx-e (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx-d (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx-c (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx-b (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx-a (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx-4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx-3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx-1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngx (npm)
Page 5740 of 6,634