Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Sep 22, 2026
Malicious code in biuneler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biunedler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biunduer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundsler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundrler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundper (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundoler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundoer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundnler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundlwr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundlur (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundlsr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundlser (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundlrr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundlrer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundlre (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundlr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundlor (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundloer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundlner (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundller (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundlir (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundlier (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundleu (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundlet (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundlesr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundlers (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundlerr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundlero (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundlern (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundlerl (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundleri (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundlere (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundlera (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundler-ruby (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in biundler-rb (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in biundler-lib (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in biundler-gem (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in biundler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundleor (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundleo (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundlenr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundlelr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundleir (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundlei (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundleer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundlee (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundled (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in biundlear (RubyGems)
2 compromised versions
Page 13 of 158