Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-ngw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngs (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nge (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nga (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng8 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng-z (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng-y (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng-x (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng-w (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng-v (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng-u (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng-t (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng-s (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng-r (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng-q (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-muz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-muy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mux (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-muw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-muv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-muu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mut (npm)
Page 5741 of 6,634