Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,628 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-react-to (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ti (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-th (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-te (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-td (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-tb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ta (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-t9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-t7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-t- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-t (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-su (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sty (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-stu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-stt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-str (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sto (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-stn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-stl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sti (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ste (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-std (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sta (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-st8 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-st- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-st (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ss (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-so (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-si (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sf (npm)
Page 6145 of 7,293