Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Jul 7, 2026
Malicious code in wandczvof0svn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof0hg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandczvof0git (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandcaluzys1778552233 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandcalq9101 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandcalq613 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandcalq5320 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandcalq32668 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandcalq25713 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandcalq2440 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandcalq17818 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandcalq1045 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandcalhg2083 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandcalh (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandbzrx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandbzrroot (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in waitwhg1778555688 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wagwn6txtab (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wagwn6bothab (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wagwn5txtab (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wagwn5bothab (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wagwn4txtab (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wagwn4bothab (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wagwn3txtab (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wagwn3bothab (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wagwn2txtab (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wagwn2bothab (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wagwn1txtab (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wagwn1bothab (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in w9927x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in w9927 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in w10385x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in w10385 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in w10266x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in w10266 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vcssvnx1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vcssvnpdfx1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vcsmodpdfx1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vcshgx1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vcshgpdfx1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vcsgitpdfx1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vcsfossilx1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vcsfossilpdfx1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vcsfetchx1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vcsbzrx1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vcsbzrpdfx1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vanityzzgbqvirfx (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in vanity2zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vand7mldo1778552612 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vand6zltd1778552597 (RubyGems)
1 compromised version
Page 18 of 71