Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-illustr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illust-935 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illust-9349 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illust-9348 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illust-9347 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illust-9346 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illust-9345 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illust-9344 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illust-9343 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illust-9342 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illust-9341 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illust-9340 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illust-934 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illust-933 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illust-93 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illust-9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illust- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illust (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illuso (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illusi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illus (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illum (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illuk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ille (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ill- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ill (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ilk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ilj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ili (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ilh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ilg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ile (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ild (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ilc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ila (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-il3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-il2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-il0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-il- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-il (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ij (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ih (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ig (npm)
Page 5751 of 6,634