Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,629 total · sorted newest first- Aug 14, 2025
Malicious code in @zalastax/nolb-_hyq (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hyper_fun_material-icon- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hyper_fun_material-icon (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hyper_fun_material-ico (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hyper_fun_material-ic (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hyper_fun_material-i (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hyper_fun_ionicons-w (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hyper_fun_ionicons-v (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hyper_fun_ionicons-u (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hyper_fun_ionicons-t (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hyper_fun_ionicons- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hyper_fun_fluentui-icon-i (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hyper_fun_fluentui-icon-h (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hyper_fun_fluentui-emoji-z (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hyper_fun_fluentui-emoji-y (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hyper_fun_fluentui-emoji-p- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hyper_fun_fluentui-emoji-o (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hyper_fun_fluentui-emoji-n (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hyper_fun_fluentui-emoji-mx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hyper_fun_fluentui-emoji-mu (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hyper_fun_fluentui-emoji-mr (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hyper_fun_fluentui-emoji-mo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hyper_fun_fluentui-emoji-m (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hyper_fun_fluentui-emoji- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hyper_fun_fa-t (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hyper_fun_fa-s (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hyp (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hya (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hy- (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hx (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hw (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hez (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hey (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hex (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hew (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hev (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_heo (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hen (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hec (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_heb (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hea (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_he (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hag (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_haf (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_hae (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_had (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_h5 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_h4 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_h3 (npm)
- Aug 14, 2025
Malicious code in @zalastax/nolb-_h2 (npm)
Page 6219 of 7,293