Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
1,041 total in nuget · sorted newest first- Jul 20, 2026
Malicious code in stripeapi.net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Zendesk-Api (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Ultimate.Wpf.Toolkit (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Winforms (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Zendesk.OAuth (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in WpfScreenHelper.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Xam.Plugins.Forms.Svg.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in ZendeskApi.Client.V2 (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in YoutubeExtractor.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in xopxopxopxopxopx (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Zendesk.Drivers (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in wpfuihelpercore (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Zendesk.Client (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Zendesk (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in WPFMediaKit.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in XboxGamebar (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Whatsapp.API (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in UI2.Guna.Winforms (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in test6789.latest (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Tessa.Windows.V2 (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in WindowsAPICodePack.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Rg.Plugins.Popups.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in WpfLightToolkit.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in WPF-UI-Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in TheOpenAI.API (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in WpfAnimatedGif.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Wpf.UI.WinForms (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in testt22esttest (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in test6789.v3 (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in vspropertypages (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in test6789.client (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Shade.WPF.Controls (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Superpower-Api (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in solnetwallet.net.core (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Tessa.Web.Client.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Syntellect.Winium.Web.Driver (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Stl.Rpc.Server.Core (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Tessa.Compilations (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Tessa.Server.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Tessa.Net.V2 (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Tessa.Web.Core (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Syntellect.Winium.Element (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Tessa.UI2 (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Syntellect.Winium.Cruciatus.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in OtpCsharp (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Tessa.Linux.V2 (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Tessa.Postgre.Sql (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Tessa.Analyzer (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Tessa.Core (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Stl.RestEase.Net (NuGet)
1 compromised version
Page 1 of 21