Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,137 total in gem · sorted newest first- Jun 25, 2024
Malicious code in abstract-api_wrapper (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in absa_notify-me (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in about-pos (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in abn-validator (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in abiquo_api (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in ability-list (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in ability-engine (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in abbyy_ruby (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in abbyy_cloud (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in abbreviated-methods (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in abbish-sequel_plugins (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in ab_split (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in ab-panel (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in aastra-xml_api (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in aastra-xml-api (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in aasm-ohm_persistence (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in aasm-history (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in aasm-active-fedora (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in aai10_mechanize (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a_test-gem (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a1632ma-ano (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a1630ty-a1630ty (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a1624-bmi (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a1616ts-gem (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a15z8my-name (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a15z7kn-niitsuma_2016_gem (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a15745105-ichinokii (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a15745105-ichinoki (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a15666011-konagayoshi (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a1548sy-yamamoto (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a1539kh-calculator (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a1535yt-gem (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a1521hk-minitest_practice (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a1521hk-minitest-practice (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a1521hk-age (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a1520mk-exercise4 (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a1510jy-bmi (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a1508ki-ika (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a1501da-birthday (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a14z6ch-elapsed_days (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a14z6ch-elapsed-days (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a1447ll-test (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a1447ll-mini_test (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a1447ll-hpbd (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a1439ty-bmiV3 (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a1437ky-bmi3 (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a1436mm-age (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a1426kt-prime_number (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a1426kt-prime-number (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a1420ks-bmi (RubyGems)
1 compromised version
Page 142 of 143