Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,050 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-plugin-p (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-plugin-o (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-plugin-n (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-plugin-m (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-plugin-l (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-plugin-k (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-plugin-j (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-plugin-i (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-plugin-h (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-plugin-g (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-plugin-f (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-configz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-configu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-configs (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-z (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-y (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-x (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-w (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-v (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-u (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-t (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-s (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-r (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-q (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-p (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-o (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-n (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-m (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-l (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config-k (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint-config- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-eslint- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esli (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esle (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esla (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esl7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esl- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ese (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esd (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-esa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-es (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-enl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-emot (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-emoji_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ember-s (npm)
Page 6203 of 7,301