Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
1,041 total in nuget · sorted newest first- Jul 20, 2026
Malicious code in Soenneker.Redis.Util.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Stl.Generators.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Stl.CommandLine.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Stl.Fusion.Ext.Contracts.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Stl.Rpc.Server.Net.Fx (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in sqzrframework480 (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Shade.UI.WinForms (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Stl.Plugins.Extensions.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in solnetplus (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Stl.Blazor.Authentication.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Stl.Fusion.Ext.Services.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Simplify.Windows.Forms.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in SharpCashAddr.Core (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in solnetunified (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in solnetall (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in sharpdefender (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Sanka.UI3.WinForms (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in SolanaWallet (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in solnetall.net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Skylark.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Solana (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in solananet (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in PayPalMerchant.SDK (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Ripple.NetCore.Api (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Sanka.UI.WinForms (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Rockstar.AssetManager.Infrastructure (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Rimworld.References.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Reothor.Lab.EvilPackage (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in seedefender (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in ppy.osu.Game.Lib (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Portable.Xaml.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in ReaLTaiizor-WinForm (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in RSG.Base (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Rimworld.Reference.Libary (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Reddit.api (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Sanka.UI2.WinForms (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in security_hacks (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Resource.Embedder.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in OCI.DotNetSDK.Visualbuilder.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in PrivacyGate.net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in OCI.DotNetSDK.Threat.intelligence (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in OpenCvSharp4.WpfExtensions.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in OCI.DotNetSDK.Usage.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Pathoschild.Stardew.Mod.Build.Config (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in OCI.DotNetSDK.Waf.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in psbuiId (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in OCI.DotNetSDK.Servicemanager.proxy (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Pathoschild.Stardew.Mod.BuildConfig (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Pathoschild.Stardew.ModBuildConfig.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in PublishIgnor (NuGet)
1 compromised version
Page 2 of 21