Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-ost (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-oss (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-oso (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ose (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-osa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-os_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-os3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-os2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-os- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-os (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-oq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-oo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-onz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ony (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-onx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-onw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-onv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-on (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-oms (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-oml (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omi (npm)
Page 6164 of 7,293