Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,217 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-funx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funs (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fung (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fune (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fund (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-func (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-funa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fun_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fun5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fun3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fun2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fun1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fun- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fun (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fum (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ful (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fuk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fuj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fui (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fuh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fug (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fuf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fue (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fud (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fuc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fub (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fua (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fu2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fu1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fu- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-frz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-fry (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-frx (npm)
Page 6202 of 7,305