Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Jun 25, 2024
Malicious code in ebay-enterprise_affiliate_network (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in ebay-client (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in dt_rake (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in drupal-fu (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in dragonfly_cloudinary-datastore (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in dragonfly_cloudinary (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in dragonfly_activerecord (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in dradis_ntospider (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in dradis_nmap (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in dradis_brakeman (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in dot-rake_tasks_in_rails (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in doge_chef-formatter (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in doge-woof (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in doge-linguist (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in doge-helper (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in dogapi_demo (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in dog-biscuits (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in divining-rod (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in devino-sms (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in deriving-license (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in delayed_plugins-airbrake (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in datadog_notifications (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in datadog_cli (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in datadog-proxy (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in datadog-apm (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in dark-sky_weather (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in danger_brakeman (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in danger_apkstats (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in danger-ios-logs (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in damn_weather (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in cytokine (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in cwlogs_s3 (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in custom-logs (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in current-weather (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in curly-lib (RubyGems)
2 compromised versions
- Jun 25, 2024
Malicious code in cucumber-rake_runner (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in crl-watchdog (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in cordova_rake (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in contributors-stats (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in commonmarker_pluggable (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in commission-junction_stats (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in commandsy_plugin (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in comic-vine (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in codon (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in codestats_metrics-reporter (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in cocoapods_icemobile-plugin (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in cocoapods_fixbugs-plugin (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in cloud-search (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in claide_plugins (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in city-search (RubyGems)
1 compromised version
Page 146 of 158