Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-_hec (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_heb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hea (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_he (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hag (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_haf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hae (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_had (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_h5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_h4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_h3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_h2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_guj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_gui (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_guh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_gug (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_guf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_gue (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_gud (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_guc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_gu- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_gt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_gs (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_grn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_grm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_grj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_gri (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_gre (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_gr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_gom (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_gob (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_goa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_go_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_go7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_gay (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_gax (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_gaw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_gav (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_gau (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_funy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_funx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_functions-io-labs-performance_test9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_functions-io-labs-performance_test (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_functions-io-labs-performance_t (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_functions-io-labs-perf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_fun- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_fun (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_fum (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_ful (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_fuk (npm)
Page 5790 of 6,634