Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-hapi-4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hapi-1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-haph (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hape (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hapd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hapc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hapa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hap_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hap4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hap- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hao (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hany (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hant (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hano (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hann (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hank (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hani (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hang (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hane (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hand (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hana (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-han_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-han2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-han1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-han0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-han- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-han (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ham (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hal (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hak (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-haj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hai (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hah (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hag (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-haf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hae (npm)
Page 5753 of 6,634