Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Dec 23, 2025
Malicious code in u2f_client (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in test_gem_978483406ebb19126a2e8c001649a4eb (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in stripe-server (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in stripe-rubocop (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in stripe-backup (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in sq-samsa (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in sq-mdc (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in space-commander (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in redis_connectable (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in rails-structured-logging (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in queenbee-plugin (RubyGems)
9 compromised versions
- Dec 23, 2025
Malicious code in prometheus_gcstat (RubyGems)
5 compromised versions
- Dec 23, 2025
Malicious code in prometheus_client_ruby (RubyGems)
5 compromised versions
- Dec 23, 2025
Malicious code in md_confluence (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in macklemore (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in html_scrubber (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in hola_rreichel3github (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in hockeystick (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in haybales (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in critter (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in cocoapod (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in chalk-thrift (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in chalk-service (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in chalk-sentry (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in chalk-interface (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in chalk-hostname (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in chalk-henson (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in chalk-consul (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in chalk-cli (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in chalk-aws (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in activestorage-redundancy (RubyGems)
1 compromised version
- Dec 2, 2025
Malicious code in pg_result_init (RubyGems)
1 compromised version
- Sep 26, 2025
Malicious code in your-gem-name12 (RubyGems)
1 compromised version
- Sep 26, 2025
Malicious code in sqlcommenter_rails (RubyGems)
2 compromised versions
- Sep 1, 2025
Malicious code in authzd-client (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in advisory_db_toolkit (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in github_chatops_extensions (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-merge-queue-go-mergequeuemonolith (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-mailreplies-replies (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-github-repositories (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in service-catalog-client (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in secret-scanning-proto (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in turboscan-client (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-support-helphub (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-packageregistry-auditlog (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in proto-education-web (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-webhooksubscriptions-subscriptions (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-modelsgateway-telemetry (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in proto-dependabot-api (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-git_src_migrator-monolith (RubyGems)
1 compromised version
Page 140 of 158