Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
1,046 total in nuget · sorted newest first- Mar 28, 2025
Malicious code in sharpdefender (NuGet)
1 compromised version
- Mar 28, 2025
Malicious code in seedefender (NuGet)
3 compromised versions
- Mar 28, 2025
Malicious code in markdown-to-html (NuGet)
3 compromised versions
- Feb 3, 2025
Malicious code in Mircоsoft.EntetyFrameworkCore (NuGet)
1 compromised version
- Feb 3, 2025
Malicious code in Microsofft.EntetyFrameworkCore (NuGet)
1 compromised version
- Feb 3, 2025
Malicious code in СityTalk.CommonLibrary (NuGet)
2 compromised versions
- Feb 3, 2025
Malicious code in Micrоsoft.EntetyFrameworkCore (NuGet)
1 compromised version
- Feb 3, 2025
Malicious code in Мircosоft.ЕntitуFramеworkСоrе (NuGet)
1 compromised version
- Dec 9, 2024
Malicious code in Modernzel.UI.WinForms (NuGet)
51 compromised versions
- Dec 9, 2024
Malicious code in Modernial.UI.WinForms (NuGet)
45 compromised versions
- Dec 9, 2024
Malicious code in Modernial.UI.WinForm (NuGet)
1 compromised version
- Dec 9, 2024
Malicious code in Gunа.Forms.Net (NuGet)
61 compromised versions
- Dec 9, 2024
Malicious code in Discord_Rpc.Net (NuGet)
52 compromised versions
- Dec 9, 2024
Malicious code in DiscordNetApi (NuGet)
51 compromised versions
- Dec 9, 2024
Malicious code in Bunifu.Form (NuGet)
51 compromised versions
- Oct 16, 2024
Malicious code in LibEmbedder.Fody (NuGet)
63 compromised versions
- Oct 16, 2024
Malicious code in Blazor.Net (NuGet)
124 compromised versions
- Jun 25, 2024
Malicious code in xopxopxopxopxopx (NuGet)
1 compromised version
- Jun 25, 2024
Malicious code in testt22esttest (NuGet)
1 compromised version
- Jun 25, 2024
Malicious code in psbuiId (NuGet)
1 compromised version
- Jun 25, 2024
Malicious code in ppy.osu.Game.Lib (NuGet)
10 compromised versions
- Jun 25, 2024
Malicious code in dnlib.net (NuGet)
14 compromised versions
- Jun 25, 2024
Malicious code in ZendeskApi.Client.V2 (NuGet)
5 compromised versions
- Jun 25, 2024
Malicious code in Zendesk.OAuth (NuGet)
4 compromised versions
- Jun 25, 2024
Malicious code in Zendesk.Drivers (NuGet)
4 compromised versions
- Jun 25, 2024
Malicious code in Zendesk.Client (NuGet)
4 compromised versions
- Jun 25, 2024
Malicious code in Zendesk-Api (NuGet)
69 compromised versions
- Jun 25, 2024
Malicious code in Zendesk (NuGet)
4 compromised versions
- Jun 25, 2024
Malicious code in YoutubeExtractor.Net (NuGet)
1 compromised version
- Jun 25, 2024
Malicious code in XboxGamebar (NuGet)
1 compromised version
- Jun 25, 2024
Malicious code in Xam.Plugins.Forms.Svg.Net (NuGet)
3 compromised versions
- Jun 25, 2024
Malicious code in WpfScreenHelper.Net (NuGet)
2 compromised versions
- Jun 25, 2024
Malicious code in WpfLightToolkit.Net (NuGet)
2 compromised versions
- Jun 25, 2024
Malicious code in WpfAnimatedGif.Net (NuGet)
9 compromised versions
- Jun 25, 2024
Malicious code in Wpf.UI.WinForms (NuGet)
1 compromised version
- Jun 25, 2024
Malicious code in Winforms (NuGet)
46 compromised versions
- Jun 25, 2024
Malicious code in WindowsAPICodePack.Net (NuGet)
3 compromised versions
- Jun 25, 2024
Malicious code in Whatsapp.API (NuGet)
10 compromised versions
- Jun 25, 2024
Malicious code in WPFMediaKit.Net (NuGet)
2 compromised versions
- Jun 25, 2024
Malicious code in WPF-UI-Net (NuGet)
2 compromised versions
- Jun 25, 2024
Malicious code in VRCһаt.API.Client (NuGet)
1 compromised version
- Jun 25, 2024
Malicious code in VRCһаt.API (NuGet)
1 compromised version
- Jun 25, 2024
Malicious code in Ultimate.Wpf.Toolkit (NuGet)
200 compromised versions
- Jun 25, 2024
Malicious code in UI2.Guna.Winforms (NuGet)
5 compromised versions
- Jun 25, 2024
Malicious code in TwіtterSharp (NuGet)
1 compromised version
- Jun 25, 2024
Malicious code in TheOpenAI.API (NuGet)
12 compromised versions
- Jun 25, 2024
Malicious code in Tessa.Windows.V2 (NuGet)
1 compromised version
- Jun 25, 2024
Malicious code in Tessa.Web.Core (NuGet)
1 compromised version
- Jun 25, 2024
Malicious code in Tessa.Web.Client.Net (NuGet)
1 compromised version
- Jun 25, 2024
Malicious code in Tessa.UI2 (NuGet)
1 compromised version
Page 7 of 21