Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-package-public-a (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-package-public (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-package-publ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-package-pubi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-package-pub (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-package-ps (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-package-pr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-package-pi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-package-ph (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-package-k (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-packa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-pack (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ds9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ds4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ds3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ds (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dru (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-drd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-drc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-draz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dray (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-drax (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-drat (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-draf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dra (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dox (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-domr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-domk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-domj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-doj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dod (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-docm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-docl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-docj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-docb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-doca (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-doc5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-doc4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-doc2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-disy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-disx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-disw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dist (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-diss (npm)
Page 5767 of 6,634