Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-_pib (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_phoes (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_phoeo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_phoenix-plugin-registry_x (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_phoenix-plugin-registry_w (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_phoeni (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_phoen (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_phoe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_pez (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_pey (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_pex (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_para (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_panz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_pany (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_panq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_pani (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_panh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_pang (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_pan (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_pac (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_pab (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_p_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_p0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_p- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_orr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_orq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_orp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_oro (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_orn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_orj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_ori (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_or4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_or2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_or1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_or- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_opz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_openfonts_r (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_openfonts_q (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_openfonts_p (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_openfonts_o (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_op (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_oe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_od (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_oc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_ob (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_nuz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_noz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_noy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_nox (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_now (npm)
Page 5785 of 6,634