Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
1,041 total in nuget · sorted newest first- Jul 20, 2026
Malicious code in BitPay-Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Autarkysoft.Bitcoin.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in Betalgo.Open.AI (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in AnimatedGifWpf (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in avvio.sky.userdataservice (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in AeroWizard.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in AdamsLair.Duality.Editor.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in BgFramework.WindowsForms.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in BitPay.Net (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in 8y234rtv8yvf (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in 86666757657658 (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in 3rugfbe8rivferiuv (NuGet)
1 compromised version
- Jul 20, 2026
Malicious code in AdamsLair.Duality.Core (NuGet)
1 compromised version
- Jul 18, 2026
Malicious code in 866667576576582 (NuGet)
1 compromised version
- Jul 7, 2026
Malicious code in vspropertypages (NuGet)
1 compromised version
- Jul 7, 2026
Malicious code in security_hacks (NuGet)
1 compromised version
- Jul 7, 2026
Malicious code in hackney.core.jwt (NuGet)
1 compromised version
- Jul 7, 2026
Malicious code in hackney.core.enums (NuGet)
1 compromised version
- Apr 16, 2026
Malicious code in wpfuihelpercore (NuGet)
2 compromised versions
- Apr 16, 2026
Malicious code in jjrawlins.cdkiampolicybuilderhelper (NuGet)
1 compromised version
- Mar 18, 2026
Malicious code in test6789.v3 (NuGet)
3 compromised versions
- Mar 18, 2026
Malicious code in test6789.latest (NuGet)
3 compromised versions
- Mar 18, 2026
Malicious code in test6789.client (NuGet)
3 compromised versions
- Mar 18, 2026
Malicious code in stripeapi.net (NuGet)
200 compromised versions
- Mar 18, 2026
Malicious code in solnetwallet.net.core (NuGet)
78 compromised versions
- Mar 18, 2026
Malicious code in solnetall.net (NuGet)
4 compromised versions
- Mar 18, 2026
Malicious code in bsure.utils (NuGet)
3 compromised versions
- Mar 18, 2026
Malicious code in bsure.binsec (NuGet)
1 compromised version
- Mar 18, 2026
Malicious code in avvio.sky.userdataservice (NuGet)
1 compromised version
- Mar 18, 2026
Malicious code in 8y234rtv8yvf (NuGet)
1 compromised version
- Mar 18, 2026
Malicious code in 3rugfbe8rivferiuv (NuGet)
11 compromised versions
- Dec 23, 2025
Malicious code in sqzrframework480 (NuGet)
15 compromised versions
- Dec 23, 2025
Malicious code in minimutex (NuGet)
5 compromised versions
- Dec 1, 2025
Malicious code in solnetunified (NuGet)
4 compromised versions
- Dec 1, 2025
Malicious code in solnetplus (NuGet)
87 compromised versions
- Dec 1, 2025
Malicious code in solnetall (NuGet)
8 compromised versions
- Dec 1, 2025
Malicious code in solananet (NuGet)
8 compromised versions
- Dec 1, 2025
Malicious code in nethereumunified (NuGet)
17 compromised versions
- Dec 1, 2025
Malicious code in netherеum.all (NuGet)
6 compromised versions
- Dec 1, 2025
Malicious code in nbitcoin.unified (NuGet)
11 compromised versions
- Dec 1, 2025
Malicious code in googleads.api (NuGet)
43 compromised versions
- Dec 1, 2025
Malicious code in coinbase.net.api (NuGet)
13 compromised versions
- Dec 1, 2025
Malicious code in bybitapi.net (NuGet)
5 compromised versions
- Dec 1, 2025
Malicious code in bitcoincore (NuGet)
7 compromised versions
- Dec 1, 2025
Malicious code in binance.csharp (NuGet)
43 compromised versions
- Mar 28, 2025
Malicious code in sharpdefender (NuGet)
1 compromised version
- Mar 28, 2025
Malicious code in seedefender (NuGet)
3 compromised versions
- Mar 28, 2025
Malicious code in markdown-to-html (NuGet)
3 compromised versions
- Feb 3, 2025
Malicious code in Mircоsoft.EntetyFrameworkCore (NuGet)
1 compromised version
- Feb 3, 2025
Malicious code in Microsofft.EntetyFrameworkCore (NuGet)
1 compromised version
Page 6 of 21