Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-q (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-p (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-o (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-n (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-m (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-l (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-k (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-j (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-i (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-h (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-g (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-f (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport-e (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passport (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passpor (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passpo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-passp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pass (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-paso (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pask (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pash (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pase (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pasa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pas- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pas (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-paru (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-part (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parsz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parsu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parst (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parss (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parsr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parsq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parso (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parsn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parsl (npm)
Page 6160 of 7,293