Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-json5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-z (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-y (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-x (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-w (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-v (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-u (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-t (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-s (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-r (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-q (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-p (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-o (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-n (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-m (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-l (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-k (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-j (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-i (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-h (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-g (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-f (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-e (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-d (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-c (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-b (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-a (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsom (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsol (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsoi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsog (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsof (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsoe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsod (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsoc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsob (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsoa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jso3 (npm)
Page 5749 of 6,634