Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-harv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-haru (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hart (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hars (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-harr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-harp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-haro (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-harn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-harm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-harl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hark (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hari (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-harh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-harg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-harf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hare (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hard (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-harc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-harb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hara (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-har_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-har2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-har- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-har (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hapi-n (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hapi-m (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hapi-l (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hapi-k (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hapi-j (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hapi-i (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hapi-h (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hapi-g (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hapi-f (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hapi-e (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hapi-d (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hapi-c (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hapi-b (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hapi-a (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hapi-4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hapi-1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-haph (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hape (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hapd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hapc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hapa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hap_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hap4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hap- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hao (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanz (npm)
Page 6182 of 7,293