Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-hany (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hant (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hano (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hann (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hank (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hani (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hang (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hane (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hand (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hana (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-han_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-han2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-han1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-han0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-han- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-han (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ham (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hal (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hak (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-haj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hai (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hah (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hag (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-haf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hae (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-had (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hab (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-haa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ha4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ha3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ha2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ha1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ha0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ha- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpx (npm)
Page 6183 of 7,293