Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-mpk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mpj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mpi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mph (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mpg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mpf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mpe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mpd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mpc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mpb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mpa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mp_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mp7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mp4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mp3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mp2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mp1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mp0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mp- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-miniz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minix (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-miniw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-miniv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-miniu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minit (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minis (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minir (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-miniq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minip (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minio (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minin (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minim (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minil (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minik (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minij (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minii (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minih (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minig (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minif (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minie (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minid (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minic (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minib (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-minia (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mini_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mini5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mini2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-mini1 (npm)
Page 6173 of 7,293