Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-had (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hab (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-haa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ha4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ha3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ha2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ha1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ha0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ha- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulps (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulph (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-z (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-y (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-x (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-w (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-v (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-u (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-t (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-s (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-r (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-q (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-p (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-o (npm)
Page 5754 of 6,634