Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-giy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gix (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-giw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fuz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fuy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fux (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fuw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fuv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fuu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fut (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fus (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fur (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fuq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fup (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fuo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funs (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fung (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fune (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fund (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-func (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fun_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fun5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fun3 (npm)
Page 5760 of 6,634