Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Jun 25, 2024
Malicious code in binary-search_tree (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in binary-search_frequency (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bin-search (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in biblesearch_api (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in beta_pod (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in beta-tools (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in beta-invites (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in benchmark_plot (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in belong_plugin-rds-pgsql-log (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in beerdb-api (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in beer-in_the_evening (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in beer-bash (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bedrock_capistrano-uploads (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bbs-uploader (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in battle_on (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in battery-growl (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in battering-ram (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batsd_dash (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batman_rails (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batched-query (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batch_rails2 (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batch_rails (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batch-translations (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batch-it (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batch-insert (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batch-actions (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batali_wedge (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batali_tk (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batali_infuse (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in basic_stats (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in barometer-weather-bug (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in barely-searchable (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bard_rake (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in banner-jobsub (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bankgiro-inbetalningar (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in backstop_deploys (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in backbone_subroute-rails (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in ba-upload (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in aws_s3-deploy (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in aws_logs (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in aws_elasticsearch (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in aws_codedeploy-agent (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in aws-upload (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in aws-sns_subscription (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in aws-cloud_search (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in aws-blue_green_deploy (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in awesome-print_carrier_wave_uploader (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in autoproj_stats (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in autoexec-bat (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in auto_deploy-test (RubyGems)
1 compromised version
Page 148 of 158