Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-f8 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-f7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-f6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-f5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-f4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-f3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-f2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-f1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-f0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-f (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-extv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-extt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-exts (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-extp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-exto (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-extn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-extm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-extl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-extj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-exti (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-exth (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-extg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-extf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-exte (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-extd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-extc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-exta (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ext_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ext4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ext3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-expressw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-expresss (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-expresso (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-expressn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-expresse (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-expressd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-expressb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-expressa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-express_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-express6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-express5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-express4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-express3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-express2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-express1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-express0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-express-y (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-express-v (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-express-r (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-express-l (npm)
Page 5763 of 6,634