Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,689 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-dema (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dek (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-decr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-decp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-decd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-decc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-deca (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dec_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dec6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-de_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-de5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-de2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-de- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dbz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dbc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dbb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-db_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-db6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-db3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-db2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-db1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-db- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-db (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dayx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-days (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dayr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-day2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-day1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-day- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dats (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-datew (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dateu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-datej (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-datei (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-datee (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dated (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-date6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-datax (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dataw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-data8 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-data7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-data- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dat (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-das (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dap (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dao (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dal (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dak (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-daj (npm)
Page 5769 of 6,634