Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-minih (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minig (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minif (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minie (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minid (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minic (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minib (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minia (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mini_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mini5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mini2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mini1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mini- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mini (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mina (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-min_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-min5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-min3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-min2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-min1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-min- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-micy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-micw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-micu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mict (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mics (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-micru (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-micrp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-microx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-microw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-microv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-microu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-microt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-micros (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-micror (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-microq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-microp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-microo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-micron (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-microm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-microl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-microk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-microj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-microi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-microh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-microg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-microf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-microe (npm)
Page 5744 of 6,634