Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,628 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-qiv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qiu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-qa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-q (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-py (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-px (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-puz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-puy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pux (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ps (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-prou (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promish (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisey (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisex (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisew (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promiseu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promiset (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promises (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promiser (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promiseq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisep (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promiseo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisen (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisem (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisel (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisej (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisei (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promiseh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promiseg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisef (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisee (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promised (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisec (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promiseb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisea (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promise_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promise4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promise2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promise- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promise (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promisa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-promis- (npm)
Page 6153 of 7,293