Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-dsi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dsa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ds9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ds4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ds3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ds (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dru (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-drd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-drc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-draz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dray (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-drax (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-drat (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-draf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dra (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dox (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-domr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-domk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-domj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-doj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dod (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-docm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-docl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-docj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-docb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-doca (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-doc5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-doc4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-doc2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-disy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-disx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-disw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dist (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-diss (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-disl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-dise (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-disd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-discov (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-discou (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-discory (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-discordz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-discords (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-discord-q (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-discord-o (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-discord-e (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-discord-d (npm)
Page 6197 of 7,293