Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-goq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gop (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gooz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gooy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goow (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goov (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goou (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goot (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goos (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goor (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gooq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goop (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gooo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goon (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goom (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gool (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gook (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gooj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gooi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gooh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googs (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googly (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googli (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlez (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlex (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlew (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googleu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlet (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googles (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googler (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlep (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googleo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlen (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlem (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlel (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlek (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlej (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlei (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googleh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlef (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googled (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlec (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googleb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlea (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google_ (npm)
Page 5757 of 6,634