Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Sep 1, 2025
Malicious code in badge-ruler (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in diff-analysis (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in dependency-graph-platform-proto (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in delorean_client (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in actions-broker (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in console_auth (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in egress (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in dependency-snapshots-api-proto (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in github-kredz (RubyGems)
1 compromised version
- Aug 28, 2025
Malicious code in omniauth-pro-sante-connect (RubyGems)
9 compromised versions
- Jul 31, 2025
Malicious code in webpack-dev-server (RubyGems)
5 compromised versions
- Jul 31, 2025
Malicious code in maventa_utils (RubyGems)
2 compromised versions
- Jul 31, 2025
Malicious code in maventa_common (RubyGems)
3 compromised versions
- Jul 31, 2025
Malicious code in icare (RubyGems)
1 compromised version
- Jul 31, 2025
Malicious code in icaret (RubyGems)
1 compromised version
- Jul 30, 2025
Malicious code in resource_registry (RubyGems)
2 compromised versions
- Jul 27, 2025
Malicious code in message_gateway (RubyGems)
1 compromised version
- Jun 18, 2025
Malicious code in xxxxxxxx (RubyGems)
1 compromised version
- Jun 18, 2025
Malicious code in teaspoon-devkit (RubyGems)
2 compromised versions
- Jun 18, 2025
Malicious code in jdbc-zzz (RubyGems)
1 compromised version
- Apr 24, 2025
Malicious code in bvr-api (RubyGems)
1 compromised version
- Mar 28, 2025
Malicious code in evenote-thrift (RubyGems)
10 compromised versions
- Mar 6, 2025
Malicious code in poc-by-shahwar (RubyGems)
1 compromised version
- Mar 6, 2025
Malicious code in poc-genrateed-by-noob (RubyGems)
1 compromised version
- Mar 6, 2025
Malicious code in evil_gem (RubyGems)
1 compromised version
- Feb 25, 2025
Malicious code in luno-cocoapods (RubyGems)
1 compromised version
- Feb 21, 2025
Malicious code in komojuu (RubyGems)
1 compromised version
- Feb 3, 2025
Malicious code in dextester (RubyGems)
1 compromised version
- Dec 17, 2024
Malicious code in haefgerasgrae (RubyGems)
1 compromised version
- Oct 16, 2024
Malicious code in znowflake_client (RubyGems)
11 compromised versions
- Oct 16, 2024
Malicious code in zen-ruby-linter (RubyGems)
1 compromised version
- Oct 16, 2024
Malicious code in zbt_element_definer (RubyGems)
2 compromised versions
- Oct 16, 2024
Malicious code in johnny_five (RubyGems)
14 compromised versions
- Jul 28, 2024
Malicious code in melio-platform-api-client (RubyGems)
9 compromised versions
- Jul 27, 2024
Malicious code in prnigtest (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in wurl-aws-s3 (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in workarea-gift-cards (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in wordify-stuckiest (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in vagrant_hvinfo (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in vacuole (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in twitter_vine (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in twitter-cards (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in telegram_bot-types (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in telegram_bot-ruby (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in telegram-notifications (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in telegram-meetup_bot (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in telegram-bot_ruby (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in telegram-bot_middleware (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in telegram-bot_api (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in taxjar-bundler (RubyGems)
1 compromised version
Page 142 of 158