Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-_sus (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_supu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_sups (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_supi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_suph (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_supf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_stv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_stu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_stt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_stre (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_stom (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_stol (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_stok (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_stoe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_stod (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_stoc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_stob (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_sti (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_stey (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_stew (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_stev (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_steu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_ste (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_stdlib_n (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_stdlib_i (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_stdlib_f (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_stdlib_e (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_stdlib_d (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_spe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_spd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_spc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_spb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_so- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_snz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_sny (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_snx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_snw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_snu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_smj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_smau (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_smat (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_sm1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_sm- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_sl- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_sk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_siq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_sip (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_sio (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_sin (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_shav (npm)
Page 5782 of 6,634