Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,137 total in gem · sorted newest first- Jun 25, 2024
Malicious code in activerecord_implicit-order (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activerecord_duplicate (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activerecord_denormalize (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activerecord_db-tools (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activerecord_databasevalidations (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activerecord-suppress-range_error (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activerecord-strict_validations (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activerecord-serialize-coders (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activerecord-safe-initialize (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activerecord-rescue-from_duplicate (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activerecord-pluck-in_batches (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activerecord-msgpack-serializer (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activerecord-json_validator (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activerecord-globalize (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activerecord-forbid-implicit_connection_checkout (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activerecord-database-validations (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activemodel_validators (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activemodel-url-validator (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activemodel-ipaddr-validator (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activemodel-immutable-validator (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activemodel-email-address_validator (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activemodel-can-validator (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activemodel-behavior-validator (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activemodel-base64-validator (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activemerchant_payline (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activemerchant_clickandbuy (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activemerchant-banklink (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activeadmin_mongoid-localize (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activeadmin_logs (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activeadmin-searchable-select (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activeadmin-jfu_upload (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in activeadmin-globalize_inputs (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in active_profiling (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in active_model-email-validator (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in active-validator (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in active-validation (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in active-tools (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in active-support_alias_class_method (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in active-subset_validator (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in active-subset-validator (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in active-serializer (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in active-search (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in active-scaffold_config_list_vho (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in active-scaffold_batch_vho (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in active-rest_client (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in active-replicas (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in active-replica (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in active-redis_stats (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in active-record_stats (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in active-record_serialize_json (RubyGems)
1 compromised version
Page 139 of 143