Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
969 total in gem · sorted newest first- Dec 23, 2025
Malicious code in hola_rreichel3github (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in hockeystick (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in haybales (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in critter (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in cocoapod (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in chalk-thrift (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in chalk-service (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in chalk-sentry (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in chalk-interface (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in chalk-hostname (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in chalk-henson (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in chalk-consul (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in chalk-cli (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in chalk-aws (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in activestorage-redundancy (RubyGems)
1 compromised version
- Dec 2, 2025
Malicious code in pg_result_init (RubyGems)
1 compromised version
- Sep 26, 2025
Malicious code in your-gem-name12 (RubyGems)
1 compromised version
- Sep 26, 2025
Malicious code in sqlcommenter_rails (RubyGems)
2 compromised versions
- Sep 1, 2025
Malicious code in authzd-client (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in advisory_db_toolkit (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in github_chatops_extensions (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-merge-queue-go-mergequeuemonolith (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-mailreplies-replies (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-github-repositories (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in service-catalog-client (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in secret-scanning-proto (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in turboscan-client (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-support-helphub (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-packageregistry-auditlog (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in proto-education-web (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-webhooksubscriptions-subscriptions (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-modelsgateway-telemetry (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in proto-dependabot-api (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-git_src_migrator-monolith (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in octolytics (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in proto-trust-metadata-api (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-webhooks-core (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-pipelinemonitor-monitoring (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-modelsgateway-access (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-pages-pagesdfsapi (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-features-featuresync (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in proto-registry-metadata-migrator-api (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in windbeam_api (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in prose_diff (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in turboghas-client (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in s4-client (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in mvnd (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-features-groups (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-features-actors (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-pages-pagesdeployerapi (RubyGems)
1 compromised version
Page 2 of 20