Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-plugin-g (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-plugin-f (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-configz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-configu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-configs (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-z (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-y (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-x (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-w (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-v (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-u (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-t (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-s (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-r (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-q (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-p (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-o (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-n (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-m (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-l (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-k (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esli (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esle (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esla (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esl7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esl- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ese (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-es (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-enl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-emot (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-emoji_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ember-s (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ember-r (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-elementp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-elemento (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-elementn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-elementl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-elementj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-elementi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-elementf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-elemente (npm)
Page 5765 of 6,634