Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Jul 7, 2026
Malicious code in vand5kbjt1778552578 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vand4yiiq1778552563 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vand3flmy1778552525 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vanc5smpr1778552455 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vanc4inrp1778552437 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vanc3ubcy1778552409 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vanc2selo1778552388 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vanc1rfwf1778552366 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vanc0ekto1778552346 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v9zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v8zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v7zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v6zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v5zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v4zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v3zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v26zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v25zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v24zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v23zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v22zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v21zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v20zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v19zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v18zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v17zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v16zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v15zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v14zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v13zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v12zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v11zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v10zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in uxwcookie4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in uxwcookie3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in uxwcookie2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in uxwcookie1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in uxtestok2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in uxtestok (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in uxlambcal2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in uxlambcal1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in uxjinawands2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in uxjinasouth2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in uxjinalamb2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in uxjanwands2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in uxjanwands1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in uxjanlamb3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in uxjanlamb2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in uxjanlamb1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in uxhttpswands1 (RubyGems)
1 compromised version
Page 19 of 71