Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-gooo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goon (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goom (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gool (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gook (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gooj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gooi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gooh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googs (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googly (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googli (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlez (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlex (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlew (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googleu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlet (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googles (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googler (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlep (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googleo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlen (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlem (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlel (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlek (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlej (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlei (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googleh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlef (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googled (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlec (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googleb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googlea (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-z (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-w (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-v (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-u (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-t (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-s (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-r (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-q (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-p (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-o (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-n (npm)
Page 6187 of 7,293