Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-muc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mub (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mua (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mu_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mu3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mu2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mu- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mpo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mpn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mpm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mpl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mpk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mpj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mpi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mph (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mpg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mpf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mpe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mpd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mpc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mpb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mpa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mp_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mp7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mp4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mp3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mp2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mp1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mp0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mp- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-miniz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minix (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-miniw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-miniv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-miniu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minit (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minis (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minir (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-miniq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minip (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minio (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minin (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minim (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minil (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minik (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minij (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minii (npm)
Page 5743 of 6,634