Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Jul 7, 2026
Malicious code in zzlambcalx1778552149 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zzjinavcssvn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zzjinavcshg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zzjinavcsgit (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zzjinavcsfossil (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zzjinavcsbzr (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zzfadgivar13 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zzfadgivar12 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zzfadgivar11 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zzfadgivar10 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zzfadgivar09 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zzfadgivar08 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zzfadgivar07 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zzfadgivar06 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zzfadgivar05 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zzfadgivar04 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zzfadgivar03 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zzfadgivar02 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zzfadgivar01 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zzfadgivar00 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zzdelay2119 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zz_arcdata (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zz-oai-test12 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwxbcstan (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwxbcsacre (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwxbclic (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwxbcgrant (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwxbccali (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwxbccalag (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwxbccaba (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwxbccab (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwwmin44268 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwwmin34639 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwwmin231650 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwwmin115707 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwwactb3703 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwwacta5072 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwttestdoc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwtlist (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwtgld (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwtgl (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwtestxabc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwtestabc4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwtestabc3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwtestabc2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwtestabc1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwtenc4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwtenc3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwtenc2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwtenc1 (RubyGems)
1 compromised version
Page 2 of 71