Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-_noonnu_8 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_nooi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_noog (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_nood (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_noob (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_nodeu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_nodet (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_nodes (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_noderu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_nodertc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_nodert (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_noder (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_noc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_nob (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_no (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_ngg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_ngf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_nan (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_nam (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_nal (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_nak (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_naj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_nad (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_nac (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_nab (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_n_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_n2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_n0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_myc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_myb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_mya (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_muw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_muv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_muu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_mu2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_mu- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_mt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_ms (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_mr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_moz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_moy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_mox (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_mor (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_moq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_mop (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_moo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_mj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_microb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_microa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_micro_ (npm)
Page 5786 of 6,634