Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebbx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebbs (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-w (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-t (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-s (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-r (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin-z (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin-y (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin-x (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin-w (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin-v (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin-u (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin-t (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin-s (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin-r (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin-q (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin-p (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin-o (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin-n (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin-m (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin-l (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin-k (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin-j (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin-i (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin-h (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin-g (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin-f (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin-e (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin-d (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin-c (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin-b (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin-a (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin-6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin-2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugin (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plugi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plug (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-plu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-pl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-p (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-m (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-f (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-b (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb-a (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb- (npm)
Page 6166 of 7,293