Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
1,041 total in nuget · sorted newest first- Jul 20, 2026
Malicious code in dnlib.net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Danger.ScriptExec-Vulnerable (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in DiscordsRpc (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Easy.Abp.PaymentService.Domain.Shared (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in coinbase.net.api (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in GMap.NET.WindowsForms.UI (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in DevLib.ModernUI.WinForm (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Chronos.Contracts.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in CodeExecTest (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in bybitapi.net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Celigo.Service.Manager.NetSuite.REST (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Bunifu.GUI (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in CData.Snowflake.API (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Bunifu.Ul2.WinForms (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in C1.WinForms.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in CitizenFX (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in CCXT.NET.API (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in CefSharp.WinForm.Net.Core (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in C1.Winform (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in CData.Salesforce.Net.Framework (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Blazor.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Coinbase.Api (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Chronos.Platforms (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Celigo.Service.Manager.NetSuite (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in CData.NetSuite.Net.Framework (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in CaptchaCsharp (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Chronos.Platform.Linux.API (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in CData.Snowflake.EntityFramework.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Bunifu.Form (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in AvalonEdit.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Bunifu (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in C1.WinForms.API (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Celigo.Suite.Talk (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in AlgoTrading (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in bsure.binsec (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Altcoins.Library (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in AlgoTrading.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in binance.csharp (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Bunifu.UI.WinForms.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in bsure.utils (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Bybit.Net.Core (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Binance.Library (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Bunifu.UI2Winforms (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Bunifu.UI3Winforms (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Binance.Libary (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Altcoins (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in bitcoincore (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in BitcoinLib.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Blazor.Captcha (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Blockcore.Networks.Bitcoin.Bc (NuGet)
1 compromised version
Page 5 of 21