Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
1,041 total in nuget · sorted newest first- Jul 20, 2026
Malicious code in PDFTron.NETCore.Windows.x64.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in OCI.DotNetSDK.Osubusage.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in OpenAI-Core (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in RadPdf.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Reactive.GUI.Winforms (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in PubIishIgnore (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in NotifyIcons (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in OCI.DotNetSDK.Certificatesmanagement.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in OCI.DotNetSDK.Databasetools.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Mail (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in OCI.DotNetSDK.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in OCI.DotNetSDK.Ai.vision (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Nughettt.TestPO (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in OCI.DotNetSDK.Osubbillingschedule.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in OCI.DotNetSDK.Datalabeling.service (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Notus.Wallet.Utility.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in OCI.DotNetSDK.Ospgateway.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in OCI.DotNetSDK.Osuborganizationsubscription.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in OCI.DotNetSDK.Apm.config (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in OCI.DotNetSDK.File.storage (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in OCI.DotNetSDK.Appmgmtcontrol.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in OCI.DotNetSDK.Ai.speech (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in OCI.DotNetSDK.Certificates.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in OCI.DotNetSDK.Osubsubscription.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in nethereumunified (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in OCI.DotNetSDK.Dashboard.service (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in NotifyIcon.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Modern.WinForm.UI (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Merger (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in NBitpayClient.API (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in NBitcoin.Indexer.API (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Modernial.UI.WinForms (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Modern.UI2.WinForm (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in ModernWpfUI.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Modern.UI2.WPF (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in NBitcoin.Net.Core (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Nfafafaffafaawfgreg3r (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in nbitcoin.unified (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Monero (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Modernzel.UI.WinForms (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Nemesis.Essentials.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in NBitcoin.Mono.Core (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Modernial.UI.WinForm (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in MinecraftPocket.Server (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in MaterialDesignExtensions.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in LiveCharts.net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Modern.UI (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in LiveCharts.Wpf.net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in markdown-to-html (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Microsofft.EntetyFrameworkCore (NuGet)
1 compromised version
Page 3 of 21