Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,689 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-dai (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dah (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dad (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-d7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-d1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cyl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cyk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cy_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cy6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cy2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cy1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cy0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cux (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-custos (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-customz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-customi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-custom0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cup (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cui (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cud (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cuc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cub (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ct (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-csx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-csw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-csu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cssf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-css-d (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-csi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cs4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cs2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cs (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-crypx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-crypt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-crypl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-crypj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-crypi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cry1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-croh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-crn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-crev (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-creu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cren (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-creati (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-createv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-create-x (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-create-r (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-create-7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-creap (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-crean (npm)
Page 5770 of 6,634