Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-fis_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fis3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-firstk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-firstg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-firstf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-firss (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-firs (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-firl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-firi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-firev (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-firet (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-firek (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fireh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fireg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fire- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fir (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fiq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fint (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fins (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-finn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-finm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-finl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fim (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fileg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-filee (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-filec (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fileb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-filea (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-file7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fii (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fie (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fia (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ff (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-faz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fax (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-faw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fav (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fasy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fasu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fass (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fas (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-f_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-f9 (npm)
Page 5762 of 6,634