Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-google-m (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-l (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-k (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-j (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-i (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-h (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-g (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-f (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-e (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-d (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-c (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-b (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-a (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google-0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-google (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-googa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goog2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goog- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goog (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goof (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gooe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-good (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gooc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goob (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gooa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goo_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goo- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gon (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gom (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gol (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gok (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gog (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gof (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-god (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gob (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-go_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-go7 (npm)
Page 6188 of 7,293