Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-_kae (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_kad (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_kac (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_juj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_jui (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_ju1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_ju- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_jt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_jsa (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_js_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_js8 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_js7 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_js4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_js2 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_js1 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_js0 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_jk (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_jj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_jal (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_jak (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_jaj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_jai (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_iol (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_iok (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_ioi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_ioh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_iod (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_io_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_io- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_ins (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_inr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_ing (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_inf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_ine (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_imp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_imo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_imn (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_imm (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_imj (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_imi (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_imh (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_im_ (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_im- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_il (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_ik (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_ij (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_ii (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hyt (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hys (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hyr (npm)
Page 6218 of 7,293