Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-b (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-a (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp-- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gula (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gul- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqlz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqly (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqlx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqlv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqlt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqlp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqlo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqlm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqll (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqli (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqlh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqlg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqlf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqle (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqld (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqlc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqlb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqla (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-z (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-y (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-x (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-w (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-v (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-u (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-t (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-s (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-r (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-q (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-p (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-o (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-n (npm)
Page 6185 of 7,293