Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,689 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-ccq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ccm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ccl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cck (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ccd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cc2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-caz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cay (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-casl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-carj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-capv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-capu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-capr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-capq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-capp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-capi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-capb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-canw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cand (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cald (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-calc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cae (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ca_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ca- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ca (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-c6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-byw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-byj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-byd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-bum (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-bul (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-buildo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-buildn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-buildi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-buildh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-buildd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-buildc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-builda (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-bsy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-bsi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-bru (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-browsi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-browsery (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-browserx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-browsej (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-browsei (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-browseh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-browsef (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-brown (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-brot (npm)
Page 5774 of 6,634