Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-ngj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nge (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ngb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-nga (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng8 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng-z (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng-y (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng-x (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng-w (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng-v (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng-u (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng-t (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng-s (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng-r (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng-q (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ng (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-muz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-muy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mux (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-muw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-muv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-muu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mut (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mus (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mur (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-muq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mup (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-muo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mun (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mum (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mulu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-multy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-multt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-multr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-multp (npm)
Page 6171 of 7,293