Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,382 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-p (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-o (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-n (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-m (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-l (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-k (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-j (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-i (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-h (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-g (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-f (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-e (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-d (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-c (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-b (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-a (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql-2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphql (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqe (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphqa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graphl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graph_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graph4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graph3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graph2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graph- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-graf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-grad (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gox (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gow (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gov (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gou (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-got (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gos (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gor (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gop (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gooz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-gooy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goow (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goov (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goou (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goot (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-goos (npm)
Page 6201 of 7,308