Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Jun 25, 2024
Malicious code in aliyun_mq-sdk (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in aliyun-sls_sdk (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in aliyun-sls (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in aliyun-ruby_api (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in aliyun-open_search (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in aliyun-open-search (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in aliyun-mns (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in aliyun-live (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in alive-state (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in aliseeks-api (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in alipay-global (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in alipay-escrow (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in alipay-dualfun (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in aligned-table (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in alidns_ruby (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in alidayu-api (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in alias-to_method (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in alias-scope (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in alias-metrics (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in alias-helper (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in alias-class (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in ali-mns (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in ali-dayu (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in algolia-places (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in alexa-plugin_generator (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in alerty_plugin-slack (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in alerty_plugin-mail (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in alerty_plugin-ikachan (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in alerty_plugin-datadog-event (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in alerty-plugin-datadog-event (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in alerty-plugin-amazon-sns (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in alephant_publisher-request (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in alephant_publisher-queue (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in alephant_publisher (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in alephant_logger-statsd (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in alchemy-pg-search (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in alcatraz_client (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in alacrity-client (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in aker-cas-cli (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in ajax-submit_rails (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in airservice-build_tools (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in airbrake_statsd (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in airbrake_graylog2 (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in airbrake_api (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in airbrake-user_attributes_rails5 (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in airbrake-user_attributes (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in airbrake-stats (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in airbrake-proxy (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in airbrake-notifying_threads (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in agnostic_duplicate (RubyGems)
1 compromised version
Page 152 of 158