Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-easa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eas_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eas- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dyv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dyu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dyns (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dynr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dynq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dynp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dyno (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dynl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dynh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dynas (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dyn3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dy6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dy2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-duy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dur (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dup (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-duo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dun (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dul (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-du_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-du (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dss (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-rollback-z (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-rollback-x (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-rollback-w (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-rollback-p (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-rollback- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-rollback (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-roll (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-package-x (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-package-pul (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-package-puc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-package-public-e (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-package-public-a (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-package-public (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-package-publ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-package-pubi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-package-pub (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-package-ps (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-package-pr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-package-pi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-package-ph (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-package-k (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-packa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsr-pack (npm)
Page 6196 of 7,293