Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,628 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-pdl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pde (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pdb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pda (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pd_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pd6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pd4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pd- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-past (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passs (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passpz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passpw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passpr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passports (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passportn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passportj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passporte (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passporta (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-z (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-y (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-x (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-w (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-v (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-u (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-t (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-s (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-r (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-q (npm)
Page 6159 of 7,293