Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,689 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-craz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-craf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cra-tr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cra-tm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cra-template-t (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cra-template-k (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cra-f (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cra (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cori (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cordovax (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cordovat (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cordova-x (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cordova-plub (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cordova-pk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cordova-g (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cordova-e (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cordova (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cordon (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cordo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-corda (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-conte (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-conta (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cont8 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-consw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-consu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-conss (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-conp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-connf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-connects (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-connectr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-conne (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-conna (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-confy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-compz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-compy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-compw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-compt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-compou (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-compoo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-componer (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-componentk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-compon (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-compl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-compb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-comp6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-commonj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-commoni (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-commonf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-commonb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-commona (npm)
Page 5771 of 6,634