Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Sep 22, 2026
Malicious code in bumdler-gem (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bumdler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdleor (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdleo (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlenr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlelr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdleir (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlei (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdleer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlee (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdled (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlear (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlea (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdle (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdldr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlar (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlaer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdker (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdiler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdier (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdelr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdeler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdeer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumddler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdaler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdaer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumcler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumaler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumadler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bulsndler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bulnlder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bulndler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bulndlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bulnder (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bulmdler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bulder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bukdler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bujlder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bujdler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bujdlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buisndler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buinxler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buinlder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buindler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buindlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buimdler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buidler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buidlef (RubyGems)
2 compromised versions
Page 10 of 158