Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,628 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-pin- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pin (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pim (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pil (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pik (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pij (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pii (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pih (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pig (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pif (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pie (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pid (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pic (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pib (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pia (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pi_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pi4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pi2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pi0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pi- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pho (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-phi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ph7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ph3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ph1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ph0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ph- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pez (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pey (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pex (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pew (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pev (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-peu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pet (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pds (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdm (npm)
Page 6158 of 7,293