Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,689 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-diss (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-disl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dise (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-disd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-discov (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-discou (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-discory (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-discordz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-discords (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-discord-q (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-discord-o (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-discord-e (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-discord-d (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-discord-c (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-discord-b (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-discord-1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-discor (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-discoh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-discoe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-discod (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-discob (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-die (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-did (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-di- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dex (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-devx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-devm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-devf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-devd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dev- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dev (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-depz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-depx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-deo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dems (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-demos (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-demor (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-demo7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-demo6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-demo-z (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-demo-y (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-demo-x (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-demo-w (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-demo-v (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-demo-o (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-demo-i (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-demo-h (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-demo- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-deme (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-demd (npm)
Page 5768 of 6,634