Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,137 total in gem · sorted newest first- Jun 25, 2024
Malicious code in a1412tk-bmi (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a1409yo-health (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a1408nw-Ounennhei (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a1330ks-bmi (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a-stupid_test_gem (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a-stupid-test_gem (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a-special_day (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in a-special-day (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in Testpranay (RubyGems)
3 compromised versions
- Jun 25, 2024
Malicious code in QubitSDK (RubyGems)
7 compromised versions
- Jun 25, 2024
Malicious code in ActiveAdmin_Globalize3-inputs (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in 99designs_tasks (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in 3scale-time_range (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in 3scale-time-range (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in 3scale-client (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in 3months-staff_schedule (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in 3months-staff-schedule (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in 37_pieces-of-flair (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in 1-as_identity_function (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in 1-as-identity_function (RubyGems)
1 compromised version
- May 8, 2024
Malicious code in dependency_confusion123 (RubyGems)
1 compromised version
- Oct 10, 2023
Malicious code in investing_parameters (RubyGems)
1 compromised version
- Aug 10, 2023
Malicious code in puppet-module-posix-system-r3.2 (RubyGems)
1 compromised version
- Aug 9, 2023
Malicious code in puppet-module-posix-system-r (RubyGems)
1 compromised version
- Jul 19, 2023
Malicious code in google-apis-androidpublisher_v2 (RubyGems)
1 compromised version
- Jul 17, 2023
Malicious code in systemd-daemon (RubyGems)
1 compromised version
- Jul 16, 2023
Malicious code in naveen4gem (RubyGems)
1 compromised version
- Jul 15, 2023
Malicious code in naveengem (RubyGems)
1 compromised version
- Jul 2, 2023
Malicious code in gitlab-glfm-markdown (RubyGems)
1 compromised version
- Jun 19, 2023
Malicious code in att-codekit (RubyGems)
1 compromised version
- Jun 17, 2023
Malicious code in ptrsec_rce (RubyGems)
1 compromised version
- May 15, 2023
Malicious code in i18n_sonder (RubyGems)
1 compromised version
- May 9, 2023
Malicious code in mandrill-api-ruby (RubyGems)
1 compromised version
- May 4, 2023
Malicious code in modified_bayes (RubyGems)
2 compromised versions
- May 4, 2023
Malicious code in microsoft_kiota_http (RubyGems)
1 compromised version
- Apr 26, 2023
Malicious code in tzinfo-i18n (RubyGems)
1 compromised version
- Apr 25, 2023
Malicious code in fluent-plugin-enhance-k8s-metadata (RubyGems)
1 compromised version
Page 143 of 143