Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
773 total in nuget · sorted newest first- Apr 16, 2026
Malicious code in wpfuihelpercore (NuGet)
2 compromised versions
- Apr 16, 2026
Malicious code in jjrawlins.cdkiampolicybuilderhelper (NuGet)
1 compromised version
- Mar 18, 2026
Malicious code in test6789.v3 (NuGet)
3 compromised versions
- Mar 18, 2026
Malicious code in test6789.latest (NuGet)
3 compromised versions
- Mar 18, 2026
Malicious code in test6789.client (NuGet)
3 compromised versions
- Mar 18, 2026
Malicious code in stripeapi.net (NuGet)
200 compromised versions
- Mar 18, 2026
Malicious code in solnetwallet.net.core (NuGet)
78 compromised versions
- Mar 18, 2026
Malicious code in solnetall.net (NuGet)
4 compromised versions
- Mar 18, 2026
Malicious code in bsure.utils (NuGet)
3 compromised versions
- Mar 18, 2026
Malicious code in bsure.binsec (NuGet)
1 compromised version
- Mar 18, 2026
Malicious code in avvio.sky.userdataservice (NuGet)
1 compromised version
- Mar 18, 2026
Malicious code in 8y234rtv8yvf (NuGet)
1 compromised version
- Mar 18, 2026
Malicious code in 3rugfbe8rivferiuv (NuGet)
11 compromised versions
- Dec 23, 2025
Malicious code in sqzrframework480 (NuGet)
15 compromised versions
- Dec 23, 2025
Malicious code in minimutex (NuGet)
5 compromised versions
- Dec 1, 2025
Malicious code in solnetunified (NuGet)
4 compromised versions
- Dec 1, 2025
Malicious code in solnetplus (NuGet)
87 compromised versions
- Dec 1, 2025
Malicious code in solnetall (NuGet)
8 compromised versions
- Dec 1, 2025
Malicious code in solananet (NuGet)
8 compromised versions
- Dec 1, 2025
Malicious code in nethereumunified (NuGet)
17 compromised versions
- Dec 1, 2025
Malicious code in netherеum.all (NuGet)
6 compromised versions
- Dec 1, 2025
Malicious code in nbitcoin.unified (NuGet)
11 compromised versions
- Dec 1, 2025
Malicious code in googleads.api (NuGet)
43 compromised versions
- Dec 1, 2025
Malicious code in coinbase.net.api (NuGet)
13 compromised versions
- Dec 1, 2025
Malicious code in bybitapi.net (NuGet)
5 compromised versions
- Dec 1, 2025
Malicious code in bitcoincore (NuGet)
7 compromised versions
- Dec 1, 2025
Malicious code in binance.csharp (NuGet)
43 compromised versions
- Mar 28, 2025
Malicious code in sharpdefender (NuGet)
1 compromised version
- Mar 28, 2025
Malicious code in seedefender (NuGet)
3 compromised versions
- Mar 28, 2025
Malicious code in markdown-to-html (NuGet)
3 compromised versions
- Feb 3, 2025
Malicious code in Mircоsoft.EntetyFrameworkCore (NuGet)
1 compromised version
- Feb 3, 2025
Malicious code in Microsofft.EntetyFrameworkCore (NuGet)
1 compromised version
- Feb 3, 2025
Malicious code in СityTalk.CommonLibrary (NuGet)
2 compromised versions
- Feb 3, 2025
Malicious code in Micrоsoft.EntetyFrameworkCore (NuGet)
1 compromised version
- Feb 3, 2025
Malicious code in Мircosоft.ЕntitуFramеworkСоrе (NuGet)
1 compromised version
- Dec 9, 2024
Malicious code in Modernzel.UI.WinForms (NuGet)
51 compromised versions
- Dec 9, 2024
Malicious code in Modernial.UI.WinForms (NuGet)
45 compromised versions
- Dec 9, 2024
Malicious code in Modernial.UI.WinForm (NuGet)
1 compromised version
- Dec 9, 2024
Malicious code in Gunа.Forms.Net (NuGet)
61 compromised versions
- Dec 9, 2024
Malicious code in Discord_Rpc.Net (NuGet)
52 compromised versions
- Dec 9, 2024
Malicious code in DiscordNetApi (NuGet)
51 compromised versions
- Dec 9, 2024
Malicious code in Bunifu.Form (NuGet)
51 compromised versions
- Oct 16, 2024
Malicious code in LibEmbedder.Fody (NuGet)
63 compromised versions
- Oct 16, 2024
Malicious code in Blazor.Net (NuGet)
124 compromised versions
- Jun 25, 2024
Malicious code in xopxopxopxopxopx (NuGet)
1 compromised version
- Jun 25, 2024
Malicious code in testt22esttest (NuGet)
1 compromised version
- Jun 25, 2024
Malicious code in psbuiId (NuGet)
1 compromised version
- Jun 25, 2024
Malicious code in ppy.osu.Game.Lib (NuGet)
10 compromised versions
- Jun 25, 2024
Malicious code in dnlib.net (NuGet)
14 compromised versions
- Jun 25, 2024
Malicious code in ZendeskApi.Client.V2 (NuGet)
5 compromised versions
Page 1 of 16