Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Jul 7, 2026
Malicious code in hackgit1778554705 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in hackfossil1778554817 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in hackbzr1778554791 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in gtest1778553451 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in gtest1778553445 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in gtest1778553438 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in gtest1778553433 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in gtest1778553427 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in grpdf1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in grpdf0 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in grax0 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in gozzz (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in govvan9000966 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in gopxy (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in goproxylondonx (RubyGems)
5 compromised versions
- Jul 7, 2026
Malicious code in goimportinjmeta1778551143 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in goimportinj1778550957 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in gexpfetchxyz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in geomtrya59d9lxrr9 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in gemxy-1778522681 (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in gemxpush21778549590 (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in gemx559383abc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in g8405sfwon (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in g8405gtkwy (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in g8405fcjbu (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in g8405bkrzi (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in g8402sunic (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in g8402gqdyg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in g8402fazkc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in g8402bcjvb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in g8320sywkw (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in g8320gdqxq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in g8320fiwiw (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in g8320bmoos (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in g8249sspor (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in g8249gqrzu (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in g8249fmvyt (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in g8249bfavd (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in fosscw3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in fosscw2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in fosscalwands (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in fosscallamb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in foofoofooproxyxyz1778553602 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in fooaid503724d (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in foo123 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in ffxnzzez0bc (RubyGems)
3 compromised versions
- Jul 7, 2026
Malicious code in fadtestgemx1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in f2fe-s1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in extfetchedwand1778556507 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in extfetchedwand1778556472 (RubyGems)
1 compromised version
Page 134 of 158