Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,628 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-pa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-p5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-p2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-p (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-iz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ix (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-iv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-iu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-it (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-is (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ir (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ip (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-io (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-in (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-im (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-il (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ik (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ii (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ih (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ig (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-if (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ie (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-id (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ic (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ib (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ia (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-i1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-i- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-i (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-d3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-b (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-as (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ar (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-aq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ap (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ao (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-an (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-am (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-al (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ak (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-aj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ai (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ah (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ag (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-af (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ae (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ad (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ac (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-react-ab (npm)
Page 6147 of 7,293