Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,461 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-hane (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hand (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hanb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hana (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-han_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-han2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-han1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-han0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-han- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-han (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ham (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hal (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hak (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-haj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hai (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hah (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hag (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-haf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hae (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-had (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-hab (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-haa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ha4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ha3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ha2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ha1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ha0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ha- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulps (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulph (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gulpc (npm)
Page 6200 of 7,310