Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-omh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ome (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-omb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-oma (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-om_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-om4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-om2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-om- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-om (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-oj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-oi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-og (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-of (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-oe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-od (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-oa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-o9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-o8 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-o7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-o6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-o5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-o4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-o3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-o1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-o0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-o- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-o (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodev (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodejsw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodejst (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodejsr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodejsp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodejsn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodejsa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodejs_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodei (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodef (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodeby (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebs (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebj (npm)
Page 6165 of 7,293