Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-packagek (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagej (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagei (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packageh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packageg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagef (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagee (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packaged (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagec (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packageb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-packagea (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-package_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-package9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-package8 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-package7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-package6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-package5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-package4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-package3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-package2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-package1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-package0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-package- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-package (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-paa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-p_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-p9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-p8 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-p7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-p6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-p5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-p4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-p3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-p2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-p1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-p0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-p- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-p (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-oz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-oy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ox (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ow (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ov (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ou (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osu (npm)
Page 6163 of 7,293