Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,674 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-am1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-am- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-alz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-aly (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-alx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-alw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-alls (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-aliw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-aliv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ali2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-alb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ai_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ai- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-agw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-agv (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-agu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ag0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-afn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-afm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-adz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-adu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-adr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-adq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-adp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-adc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ada (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ad7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ad1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ad- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ad (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-acu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-acs (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-acc (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-abz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-aby (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-ab (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-a3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_zp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_zo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_zn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_zg (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_zf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_zez (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_ze (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_z9 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_yz (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_yy (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_yun (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_yul (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_yuk (npm)
Page 6209 of 7,294