Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-goj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gog (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gof (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-god (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gob (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-go_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-go7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-go2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-go1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-go- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-go (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-glz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gly (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-glx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-glw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-glv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-glu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-glt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gls (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-glr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-glq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-glp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-glo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gln (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-glm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gll (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-glk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-glj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gli (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-glh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-glg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-glf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gle (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gld (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-glc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-glb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gla (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gl_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gl2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gl1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gl- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-giz (npm)
Page 5759 of 6,634