Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Oct 22, 2026
Malicious code in zzhelloworld_socktest (RubyGems)
1 compromised version
- Oct 21, 2026
Malicious code in zzhelloworld_socktest (RubyGems)
7 compromised versions
- Oct 11, 2026
Malicious code in ton-jetton-tools (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in xrp-ledger-utils (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in web3-signer-kit (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in wallet-balance-scanner (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in wallet-hd-derive (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in tron-trc20-utils (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in staking-apr-fetcher (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in gas-refuel-bridge (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in seed-phrase-validator (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in perp-funding-rates (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in airdrop-eligibility-check (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in defi-yield-calculator (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in mev-sandwich-detect (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in erc20-approve-audit (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in dex-router-abis (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in multichain-rpc (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in block-explorer-api (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in nft-metadata-resolver (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in evm-tx-decoder (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in crypto-tax-export (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in hd-wallet-generator (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in btc-fee-estimator (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in sol-mint-utils (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in eth-gas-oracle (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in eth-gas-oracle (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in multichain-rpc (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in web3-signer-kit (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in mev-sandwich-detect (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in crypto-tax-export (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in airdrop-eligibility-check (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in btc-fee-estimator (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in defi-yield-calculator (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in staking-apr-fetcher (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in seed-phrase-validator (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in erc20-approve-audit (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in evm-tx-decoder (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in tron-trc20-utils (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in nft-metadata-resolver (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in hd-wallet-generator (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in wallet-balance-scanner (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in ton-jetton-tools (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in dex-router-abis (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in wallet-hd-derive (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in perp-funding-rates (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in block-explorer-api (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in xrp-ledger-utils (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in sol-mint-utils (RubyGems)
1 compromised version
- Oct 11, 2026
Malicious code in gas-refuel-bridge (RubyGems)
1 compromised version
Page 1 of 158