Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Sep 22, 2026
Malicious code in bhsndler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bhnlder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bhndler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bhndlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bhmdler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in beusndler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in beunlder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in beundler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in beundlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in beumdler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in besndler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in benlder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bendler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bendlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bemdler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in beiundler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bbusndler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bbunlder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bbundler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bbundlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bbumdler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bbiundler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bausndler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in baunlder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in baundler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in baundlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in baumdler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in basndler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in banlder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bandler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bandlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bamdler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in baiundler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in ausndler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in aunlder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in aundler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in aundlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in aumdler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in aubndler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in aiundler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in abusndler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in abunxler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in abunlder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in abundler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in abundlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in abumdler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in abndler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in abiundler (RubyGems)
2 compromised versions
- Aug 24, 2026
Malicious code in ultra-smart-tool (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in ultra-smart-pkg (RubyGems)
1 compromised version
Page 15 of 158