Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-_ril (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_reaz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_reax (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_reaw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_reactl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_react-o (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_react-n (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_react-mx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_react-me (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_react-md (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_react-m (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_react-g (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_react-f (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_react-e (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_rar (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_rap (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_rao (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_rac (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_rab (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_raa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_qw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_quy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_quw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_quv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_quu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_qus (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_quo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_qun (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_qum (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_quat (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_quar (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_quan (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_quam (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_qual (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_quak (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_puu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_pup (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_pun (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_pum (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_pul (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_pr- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_pq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_pls (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_plr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_plq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_plp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_plo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_pis (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_pid (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_pic (npm)
Page 5784 of 6,634