Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,628 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-pq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-poz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-poy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pox (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pow (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pov (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pou (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pot (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posty (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-postx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-postw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-postv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-postu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-postt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posts (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-postr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-postq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-postp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posto (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-post (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-poss (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-poso (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pose (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-posa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pos_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pos2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pos- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pos (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-por (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-poq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pop (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-poo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pon (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-poj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-poh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pog (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pof (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-poe (npm)
Page 6156 of 7,293