Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,628 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-i (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-h (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-g (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-f (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-e (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-d (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-c (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-b (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik-a (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzik (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuzi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmuz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmus (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmun (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmui (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qms (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qml (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qme (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qmb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qma (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qm_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qm9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qm7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qm2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qm- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ql (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qiz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qiy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qix (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qiw (npm)
Page 6152 of 7,293