Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-ecy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eci (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ech (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-easyz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-easyy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-easyx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-easyw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-easyv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-easyt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-easy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ease (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-easc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-easa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eas_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eas- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dyv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dyu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dyns (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dynr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dynq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dynp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dyno (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dynl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dynh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dynas (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dyn3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dy6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dy2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-duy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dur (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dup (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-duo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dun (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dul (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-du_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-du (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dss (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-rollback-z (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-rollback-x (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-rollback-w (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-rollback-p (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-rollback- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-rollback (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-roll (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-package-x (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-package-pul (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-package-puc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-package-public-e (npm)
Page 5766 of 6,634