Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,137 total in gem · sorted newest first- Aug 24, 2026
Malicious code in nano-safe-sys (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in nano-quick-tool (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in nano-quick-mod (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in nano-quick-box (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in nano-pure-tool (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in nano-max-mod (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in nano-max-box (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in nano-fast-lib (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in nano-clean-sys (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in mini-sharp-lib (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in mini-sharp-kit (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in mini-safe-mod (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in mini-safe-lib (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in mini-safe-gem (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in mini-quick-pkg (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in mini-pure-tool (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in mini-pure-lib (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in mini-max-gem (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in mini-lite-rb (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in mini-fast-lib (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in mini-clean-sys (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in micro-sharp-mod (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in micro-sharp-kit (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in micro-safe-tool (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in micro-quick-box (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in micro-pure-kit (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in micro-max-rb (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in micro-max-mod (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in micro-max-hub (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in micro-lite-pkg (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in micro-fast-mod (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in micro-fast-hub (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in micro-clean-gem (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in mega-smart-tool (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in mega-smart-sys (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in mega-smart-pkg (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in mega-sharp-hub (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in mega-safe-pkg (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in mega-safe-hub (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in mega-quick-rb (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in mega-pure-tool (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in mega-pure-gem (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in mega-pro-kit (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in mega-pro-box (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in mega-lite-kit (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in mega-fast-sys (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in mega-clean-sys (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in hyper-smart-kit (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in hyper-sharp-lib (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in hyper-sharp-box (RubyGems)
1 compromised version
Page 2 of 143