Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-nodebb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodeba (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodeb- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodeb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nodea (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-z (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-y (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-x (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-w (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-v (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-u (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-t (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-sy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-sx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-sw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-sv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-su (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-st (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-ss (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-sr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-sq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-sp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-so (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-sn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-sm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-sl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-sk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-sj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-si (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-sh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-sg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-s (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-s (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-l (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-k (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-j (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-i (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-h (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-g (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-f (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-e (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-d (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-c (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-b (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-a (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contrib-- (npm)
Page 6167 of 7,293