Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,531 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-illust-9341 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illust-9340 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illust-934 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illust-933 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illust-93 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illust-9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illust- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illust (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illuso (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illusi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illus (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illum (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illuk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ille (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-illa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ill- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ill (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ilk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ilj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ili (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ilh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ilg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ile (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ild (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ilc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ila (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-il3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-il2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-il0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-il- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-il (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ij (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ih (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ig (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-idz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-idy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-idx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-idw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-idv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-idu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-idt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ids (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-id (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-htmc (npm)
Page 6199 of 7,311