Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-contl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-conti (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-conta (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-conf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-com (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-col (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-cm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-cl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-ci (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-ch (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-cb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-ca (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-b (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-a (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-red-2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-rec (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-reb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-rea (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-rd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-rc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-rb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-ra (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-r_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-r3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-r2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-r- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-q (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-p (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-o (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-n (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-m (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-l (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-k (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-j (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-i (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-h (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-g (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-f (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-e (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-d (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-cy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-cx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-cw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-cu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-ct (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-cs (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-cr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-cq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-cp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-node-co (npm)
Page 6168 of 7,293