Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,689 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-antq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-antp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-angx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-angw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-angv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-angut (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-angus (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-anguo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-angularr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-angulari (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-angularh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-angular_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-angular0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-angular-d (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-angular-b (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-angu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ang (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-am_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-am1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-am- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-alz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-aly (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-alx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-alw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-alls (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-aliw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-aliv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ali2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-alb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ai_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ai- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-agw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-agv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-agu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ag0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-afn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-afm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-adz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-adu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-adr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-adq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-adp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-adc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ada (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ad7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ad1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ad- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ad (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-acu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-acs (npm)
Page 5778 of 6,634