Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,689 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-bron (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-brof (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-brd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-brb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-braj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-br2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-botv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-botu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-boto (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-botn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-botj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-boti (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-both (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-boou (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-bootw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-bootv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-bootsty (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-bootstr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-bootst (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-booto (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-boot (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-bm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-blox (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-blow (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-blov (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-blou (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-bloa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-blg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ble (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-bld (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-bla (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-bitt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-bita (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-bit_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-bit6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-bis (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-bir (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-biq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-binb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-bin6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-bin2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-bin1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-bij (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-bii (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-bih (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-bi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ber (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-bay (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-bax (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-basep (npm)
Page 5775 of 6,634