Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Jul 7, 2026
Malicious code in ylam01778568568 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in ygresultwzqbot (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in yardxabc888 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xyzfb469385fb49d1b7 (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in xyzbr (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xxproxywebtestdfg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xwandxml1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xwandstestfoobarx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xwandservmtg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xwandserv1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xwandrss1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xwandpdf1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xwandics1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xwandcal1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xwandajax1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xwa51778568189 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xwa41778568189 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xwa31778568189 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xsouthcal1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xso81778568189 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xso71778568189 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xso61778568189 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xlambserv1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xlambpdfconv (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xlambcal1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xla21778568189 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xla11778568189 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xla01778568189 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xjinawand1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xjinasouth1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xjinalamb1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xgemwahfoo (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xe159448863 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xdd66ac790f (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xcafdc17579 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xabczztest (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in xabc0e407773 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in x51a3db3814 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in x1488111566 (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in x0e0f43d0fc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wye4ce4244 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wyc695eae5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wybc6423a5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wyb00f8cef (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wy6a903e9c (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wy2ea1b5de (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wy2e45b008 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wwk2601txtabcde (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wwk2601simpleabc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wwk2601abcde (RubyGems)
1 compromised version
Page 10 of 71