Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Jul 7, 2026
Malicious code in wandscalx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandscal4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandscal3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandscal2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandscal (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandqhack3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandqhack2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandqhack1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandqhack0 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandproxyqueryabc17678 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandproxyhgenc20295 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandproxyhgabc21964 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandproxyhgabc10487 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandproxy4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandproxy3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandproxy2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandproxy1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandprobeabcabc431 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandpdfsvna (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandpdfhga (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandpdffossila (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandpdfbzra (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandmodhack7856 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandmodhack54386 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandmine24680 (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in wandjinamod36977 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandhr9 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandhr8 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandhr7 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandhr6 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandhr5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandhr4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandhr3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandhr2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandhr12 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandhr11 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandhr10 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandhr1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandhr0 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandhgx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandhgroot (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandhgpath (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandhgenc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandhgcal (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandhgag (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandhcalz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandgitx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandgitroot (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandfosurl (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandfossiltest (RubyGems)
1 compromised version
Page 16 of 71