Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
331,688 total in npm · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-_fuj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_fui (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_fr8 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_fr4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_fol (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_fok (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_foi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_foh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_feg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_fef (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_fee (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_fed (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_fec (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_feb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_fd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_fat (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_fas (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_far (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_faq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_f_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_f1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_f- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_ez (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_extri (npm)
- Aug 14, 2025
Malicious code in responsive-dashboard (npm)
1 compromised version
- Aug 14, 2025
Malicious code in wf-logger (npm)
1 compromised version
- Aug 14, 2025
Malicious code in geospatial-example (npm)
1 compromised version
- Aug 14, 2025
Malicious code in webflow-extension (npm)
1 compromised version
- Aug 14, 2025
Malicious code in adobe-helix-rum-enhancer (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in search-result (npm)
1 compromised version
- Aug 14, 2025
Malicious code in guppy-dev (npm)
1 compromised version
- Aug 14, 2025
Malicious code in @azix058/design-system (npm)
1 compromised version
- Aug 14, 2025
Malicious code in @angular_devkit/build-webpack (npm)
1 compromised version
- Aug 13, 2025
Malicious code in @angular_devkit/core (npm)
1 compromised version
- Aug 13, 2025
Malicious code in verizon-media-open-source-project-protal (npm)
1 compromised version
- Aug 13, 2025
Malicious code in web-tv-app (npm)
1 compromised version
- Aug 13, 2025
Malicious code in dependerable (npm)
1 compromised version
- Aug 13, 2025
Malicious code in f0-service-manager (npm)
3 compromised versions
- Aug 13, 2025
Malicious code in mint-backend (npm)
1 compromised version
- Aug 13, 2025
Malicious code in azure-documentdb-node (npm)
2 compromised versions
- Aug 13, 2025
Malicious code in dagger-core (npm)
1 compromised version
- Aug 13, 2025
Malicious code in solana-pump-sdk (npm)
18 compromised versions
- Aug 13, 2025
Malicious code in my-internal-util-alpha03 (npm)
1 compromised version
- Aug 13, 2025
Malicious code in com.microsoft.mrtk.graphicstools.shadergraph.unity (npm)
- Aug 13, 2025
Malicious code in @mobile-sdk/videoads-ad-video-player-html5 (npm)
2 compromised versions
- Aug 13, 2025
Malicious code in microsoft-cloud-integrations (npm)
- Aug 13, 2025
Malicious code in an-video-viewability (npm)
1 compromised version
- Aug 13, 2025
Malicious code in dependsalotxyz (npm)
1 compromised version
- Aug 13, 2025
Malicious code in signup-ui-lego-core (npm)
2 compromised versions
- Aug 13, 2025
Malicious code in recoilusagelogevent (npm)
Page 5791 of 6,634