Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulps (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulph (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-z (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-y (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-x (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-w (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-v (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-u (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-t (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-s (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-r (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-q (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-p (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-o (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-n (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-m (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-l (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-k (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-j (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-i (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-h (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-g (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-f (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-e (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-d (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-c (npm)
Page 6184 of 7,293