Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,835 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-com6 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-com1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-com (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-colw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-colou (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-colos (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-colory (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-colorm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-colorl (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-colop (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-coloo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-coloc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-coi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cody (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-codu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cods (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-codr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-codez (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-codej (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-codeh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cod (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-co2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cmg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cmf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cloudy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cloudw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cloudr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cloud4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cloud1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cloj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cliz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cliy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-clil (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cli-m (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cli-l (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-clf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cld (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-clac (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-clab (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cl_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cl4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cl3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cl- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cky (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ckx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ckw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-cks (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ckh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ck2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ck1 (npm)
Page 6206 of 7,297