Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,137 total in gem · sorted newest first- Aug 24, 2026
Malicious code in ultra-smart-tool (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in ultra-smart-pkg (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in ultra-smart-hub (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in ultra-sharp-kit (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in ultra-safe-box (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in ultra-quick-hub (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in ultra-pure-mod (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in ultra-pure-hub (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in ultra-pro-tool (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in ultra-pro-pkg (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in ultra-pro-kit (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in ultra-max-sys (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in ultra-max-pkg (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in ultra-fast-rb (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in ultra-fast-hub (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in tiny-smart-sys (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in tiny-smart-mod (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in tiny-sharp-pkg (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in tiny-safe-sys (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in tiny-quick-box (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in tiny-pure-box (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in tiny-pro-sys (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in tiny-pro-rb (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in tiny-pro-lib (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in tiny-max-gem (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in tiny-max-box (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in super-sharp-sys (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in super-sharp-lib (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in super-quick-sys (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in super-quick-gem (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in super-pure-rb (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in super-pro-hub (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in super-lite-hub (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in piko-smart-sys (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in piko-smart-pkg (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in piko-sharp-sys (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in piko-max-tool (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in piko-max-gem (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in piko-lite-mod (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in piko-lite-gem (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in piko-fast-rb (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in piko-fast-gem (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in piko-fast-box (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in piko-clean-mod (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in piko-clean-hub (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in opentelemetry-exporter-otlp-http (RubyGems)
5 compromised versions
- Aug 24, 2026
Malicious code in nano-smart-pkg (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in nano-smart-gem (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in nano-smart-box (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in nano-sharp-kit (RubyGems)
1 compromised version
Page 1 of 143