Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
1,041 total in nuget · sorted newest first- Jul 20, 2026
Malicious code in minimutex (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in MailBee (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in LiveCharts.WinForms.net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Live.Charts.Winforms (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in MetroModern.UI2 (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in LiveChartsCore.net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Litecoin (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in LibEmbedder.Fody (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Live.Charts.WinForm (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in LedgerWallet.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Lfafafa2 (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Lib.Harmony.net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Lfafafa3 (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Clipboard.net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Fluentmail.Smtp (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in KANYEWESTBRIDGADE (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Huobi.Net.Core (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in GoogleReCaptcha.V4 (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in IAmRoot (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in LagoVista.CloudStorage.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in IAmRootx (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in KeyAuthAPI (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in HIC.System.Windows.Forms.DataVisualization.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in HarmonyX.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in googleads.api (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in KrakenExchange.Net.Core (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in jjrawlins.cdkiampolicybuilderhelper (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in DiscordRPC.Net.Core (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Kraken.Exchange (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in GetRekt420 (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Kucoin.Net.Core (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Going.Plaid.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in hackney.core.jwt (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in LazyProxy.Unity.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in KanyeWestWasRight (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in KucoinExchange.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in hackney.core.enums (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Forge.Open.AI (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in GetRekt420-2 (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Csla.Windows.Forms.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in CsvHelper.Excel.Core.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in DiscordNetApi (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in GetRekt420-3 (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Crypto.Exchange (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Discord_Rpc.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in EBBuildClient.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in DistributedLocks.AzureStorage.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in DotSpatial.Projections.Forms.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in DiscordRichPresenceAPI (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in DotSpatial.Modeling.Forms.Net (NuGet)
1 compromised version
Page 4 of 21