Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Sep 1, 2025
Malicious code in octolytics (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in proto-trust-metadata-api (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-webhooks-core (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-pipelinemonitor-monitoring (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-modelsgateway-access (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-pages-pagesdfsapi (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-features-featuresync (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in proto-registry-metadata-migrator-api (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in windbeam_api (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in prose_diff (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in turboghas-client (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in s4-client (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in mvnd (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-features-groups (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-features-actors (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-pages-pagesdeployerapi (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-git_src_migrator-migrations (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-octoshift-imports (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-kredz-core (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-examples-octocat (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-odometer-core (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-merge-queue-go-mergequeueservice (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-features-featureflaghub (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in treelights-client (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in spokes-proto (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-spokesd-core (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-features-core (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-snippy-snippy (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-registrymetadata-core (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in sarif (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-trusttiers-trusttier (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-proxima-enterprisemanagement (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-notifications-notifyd (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in proto-registry-metadata-api (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in proto-dependency-graph-api (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-octoshift-migrations (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in spamurai-dev-kit (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in github-proto-repositories (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in actions-runner-admin (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in actions-run-service (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in chatterbox-client (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in diet_earthsmoke (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in blackbird-analysis (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in github-kv (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in github-orca (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in blackbird-client (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in authnd-client (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in driftwood-client (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in aqueduct-client (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in feature-flags-client (RubyGems)
1 compromised version
Page 141 of 158