Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,689 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-basen (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-basem (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-basel (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-basef (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-basee (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-basea (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-base9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-backt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-backr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-backq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-backo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-babp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-babo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-babk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-babf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-babelf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-babel2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-babel-z (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-babel-pru (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-babel-preset-a (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-babel-prese (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-babel-6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-babel- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-b2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-az_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-az1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-az0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-axl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-axk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-axj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-axi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-awsa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-aws4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-aws3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-aws (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-awj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-awi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-awh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-awe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-awd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-awc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-avk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-avj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-avh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-avg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-autu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-autt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-autoc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-auto (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-auth (npm)
Page 5776 of 6,634