Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-lion-lib-i (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-lion-lib-h (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-lion-lib-g (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-lion-lib-f (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-lion-lib- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-lion-lib (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-lion-li (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-lion-l (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-lion- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsox (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsov (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsou (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsot (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsos (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsor (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsoq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsop (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsoo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsony (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsont (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsons (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsono (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsoni (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsong (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsone (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsond (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsona (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json8 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json6 (npm)
Page 5748 of 6,634