Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Jun 25, 2024
Malicious code in cinch_weatherman (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in cinch_logsearch (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in chef_handler-statsd (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in chef_handler-datadog-demo (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in chef_cloudsearch (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in chef-partial-search (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in chalk_rake (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in ceedling_autorake (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in catarse-paypal_express (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in cat_dog (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in cards-lib (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in capistrano_telegram-notification (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in capistrano_telegram (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in capistrano_stats (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in capistrano_scm-gitsubmodules (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in capistrano_runit-rake (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in capistrano_rake (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in capistrano_rails-subdir (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in capistrano_rails-logs-tail (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in capistrano_logs (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in capistrano_copy-subdir (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in capistrano_auth-subscriber (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in capistrano_airbrake (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in capistrano3_drupal (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in capistrano-telegram-notification (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in capistrano-scm-git-with_submodule_and_resolv_symlinks (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in cap_drupal-multisite (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in candy_-sql (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in candy-check (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in campaign-monitor_subscriber (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in cafepress-api (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in cache-stats (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bunto_press (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bunto-test_plugin_malicious (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bunto-test_plugin (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bulldoggy_filesystem (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in brightbox_boxgrinder-plugins (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in branch-raker (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in brakeman-translate_checkstyle_format (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bosh_plugin-pipeline (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bosh_plugin-generator (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bosh-lastpass_plugin (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bosh-cli_plugin_redis (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bosh-cli_plugin_consul (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in blinkman-twitter-search (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in blinkist_airbrake-scrubber (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in blade-sauce-labs_plugin (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in blacklight-advanced_search (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bitmovin_api (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bisearch-enzim_hu (RubyGems)
1 compromised version
Page 147 of 158