Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-_lap (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_lao (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_kur (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_kuq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_kup (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_kuo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_kg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_kf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_kez (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_kex (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_ke (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_kaf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_kae (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_kad (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_kac (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_juj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_jui (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_ju1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_ju- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_jt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_jsa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_js_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_js8 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_js7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_js4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_js2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_js1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_js0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_jk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_jj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_jal (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_jak (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_jaj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_jai (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_iol (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_iok (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_ioi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_ioh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_iod (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_io_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_io- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_ins (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_inr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_ing (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_inf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_ine (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_imp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_imo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_imn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_imm (npm)
Page 5788 of 6,634