Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-fireh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fireg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fire- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fir (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fiq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fint (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fins (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-finn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-finm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-finl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fim (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fileg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-filee (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-filec (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fileb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-filea (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-file7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fii (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fie (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fia (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ff (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-faz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fax (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-faw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fav (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fasy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fasu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fass (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fas (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-f_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-f9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-f8 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-f7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-f6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-f5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-f4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-f3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-f2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-f1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-f0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-f (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-extv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-extt (npm)
Page 6192 of 7,293