Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-express-c (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-express- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-exp9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-exp2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-exp0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eti (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ethy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ethx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ethu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-etht (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ethm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ethe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eth2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eth- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-etg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ete (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esliv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslinte (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslintc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslintb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-z (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-y (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-x (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-w (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-s (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-plugin-v (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-plugin-u (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-plugin-t (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-plugin-s (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-plugin-r (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-plugin-q (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-plugin-p (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-plugin-o (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-plugin-n (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-plugin-m (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-plugin-l (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-plugin-k (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-plugin-j (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-plugin-i (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-plugin-h (npm)
Page 5764 of 6,634