Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-parh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pare (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pard (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-parb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-para (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-par_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-par7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-par- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pany (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-panx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-panw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-panv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-panu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pant (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pans (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-panr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pano (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pann (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-panm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-panl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pank (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-panj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pani (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-panh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pang (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-panf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pane (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pand (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-panc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-panb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pana (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pan6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-pan (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagez (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagey (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagex (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagew (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagev (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packageu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packaget (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packages (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packager (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagep (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packageo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagen (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagem (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagel (npm)
Page 6162 of 7,293