Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-google2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-z (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-w (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-v (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-u (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-t (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-s (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-r (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-q (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-p (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-o (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-n (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-m (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-l (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-k (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-j (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-i (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-h (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-g (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-f (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-e (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-d (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-c (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-b (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-a (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goog2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goog- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goog (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goof (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gooe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-good (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gooc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goob (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gooa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goo_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goo- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gon (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gom (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gol (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gok (npm)
Page 5758 of 6,634