Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,628 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-react-se (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-sa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-s3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-s- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-s (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ru (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rs (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ro (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ri (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-rb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-r (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-py (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-px (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ps (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-po (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ph (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pc (npm)
Page 6146 of 7,293