Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,689 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-cky (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ckx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ckw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cks (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ckh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ck2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ck1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ck (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cit (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cis (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ciq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cip (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cio (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cii (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ci_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ci4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ci2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-chz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-chy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-chx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-chrr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-chr1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-chq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-chiw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-chez (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-chem (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-chel (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-chej (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-chei (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cheh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-checku (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-checkg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-checke (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-chech (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-chec (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-chau (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-chat (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cha- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ceo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cem (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ceh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ceg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ced (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cec (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ceb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cdw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cdv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cd_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cd1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ccr (npm)
Page 5773 of 6,634