Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
332,470 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-fu1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fu- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-frz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fry (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-frx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-frw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-frv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-frt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-frs (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-frr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-frp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-frn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-frm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-frl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-frk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-flt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-flam (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-flaj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-flai (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-flag (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-flaf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-flac (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-flab (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-flaa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fis_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fis3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-firstk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-firstg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-firstf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-firss (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-firs (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-firl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-firi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-firev (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-firet (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-firek (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fireh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fireg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fire- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fir (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fiq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fint (npm)
Page 5777 of 6,650