Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Jul 7, 2026
Malicious code in whg1778555575753 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in whg1778555574496 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in whg1778555572981 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wgssrftest (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wgssrfsvn1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wgssrfmod1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wgssrfhg1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wgssrffossil1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wgssrfbzr1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wgsfx03 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wgsfostrail2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wgsfosroot2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wgsfospdf2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wgsfosmgcal2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wgsfoslistdoc2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wgsfoshttp2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wgsfoshtml2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wgsfmore83 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wgsfmore73 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wgsfmore63 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wgsfmore53 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wgsfmore43 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wgsfmore33 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wgsfmore23 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wgsfmore13 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wgsfmore03 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wfetch6a028604b (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wfetch6a028604a (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wenc9927 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wenc10385 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wenc10115 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wenc10010 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wcomp (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wcalm1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wcaldt (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wcalamp (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wcal (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wbotsvn999 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wbotmwoy27a3 (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in wbothg999 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wbotfossil999 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wbotbzr999 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in watpdf885 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in watpdf884 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in watpdf877 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in watestabc129 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in watestabc128 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in watestabc127 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in watestabc126 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in watestabc125 (RubyGems)
1 compromised version
Page 14 of 71