Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-n (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-m (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-l (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-k (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-j (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-i (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-h (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-g (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-f (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-e (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-d (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-c (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-b (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-a (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gula (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gul- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqlz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqly (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqlx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqlv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqlt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqlp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqlo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqlm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqll (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqli (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqlh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqlg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqlf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqle (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqld (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqlc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqlb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqla (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-z (npm)
Page 5755 of 6,634