Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Jul 7, 2026
Malicious code in wandfosroot2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandfosroot (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandfospdf (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandfosdoc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandfetchhackx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandfetchhacksvn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandfetchhackhg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandfetchhackgit (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandfetchhackfossil (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandfetchhackbzr (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandextractabc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wanddbbehg06 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wanddbbehg05 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wanddbbehg04 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wanddbbehg03 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wanddbbehg02 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wanddbbehg01 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wanddbbe01 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandday26x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof9svn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof9hg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof9git (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof8svn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof8hg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof8git (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof7svn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof7hg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof7git (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof6svn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof6hg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof6git (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof5svn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof5hg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof5git (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof4svn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof4hg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof4git (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof3svn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof3hg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof3git (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof2svn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof2hg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof2git (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof1svn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof1hg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof1git (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof11hg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof10svn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof10hg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof10git (RubyGems)
1 compromised version
Page 17 of 71