Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Jun 25, 2024
Malicious code in generate-object-property (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in gemnasium-gitlab-service (RubyGems)
16 compromised versions
- Jun 25, 2024
Malicious code in gamer-stats (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in game-shuffle_cards (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in galvinhsiu-active-cart (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in fossa-curl-test (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in fortnite-api (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in forgiving-nil (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in foot-stats (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in font_stack (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in font_roboto-rails (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in font_league (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in font_fabulous (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in font_awesome-sassc (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in font_awesome-sass-mixins (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in font_awesome-sass-c (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in font_awesome-sass (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in font-assets (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in fluent_plugin-statsite (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in fluent_plugin-statsd-output (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in fluent_plugin-statsd-event (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in fluent_plugin-statsd (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in fluent_plugin-stats-notifier (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in fluent_plugin-stats (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in fluent_plugin-logsene (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in fluent_plugin-dogstatsd-mediba (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in fluent_plugin-dogstatsd (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in fluent_plugin-datadog-statsd (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in fluent_plugin-cloudwatch-logs-foxtrot9 (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in fluent_plugin-cloudwatch-logs (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in fluent_plugin-airbrake-python (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in fluent_plugin-airbrake-logger (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in fluent-plugin-haproxy-stats (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in fluent-plugin-container-logs_filter (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in first-giving_api (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in first-gem_rakesh (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in fig-rake (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in execute-with_rescue_with_airbrake (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in et_azure_insights (RubyGems)
4 compromised versions
- Jun 25, 2024
Malicious code in enpit-weather (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in endosome (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in emque_stats (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in em_synchrony-dataone-vin (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in em_statsd-ruby (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in em_statsd (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in ellen_weather (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in education-stats (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in edmunds-vin (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in ebay_ysr (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in ebay-trading (RubyGems)
1 compromised version
Page 145 of 158