Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-jsou (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsot (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsos (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsor (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsoq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsop (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsoo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsony (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsont (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsons (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsono (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsoni (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsong (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsone (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsond (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsonb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-jsona (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json8 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-z (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-y (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-x (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-w (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-v (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-json-u (npm)
Page 6178 of 7,293