Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Jul 7, 2026
Malicious code in trya3zz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in trya2zz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in trya1zz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in tmpxyz984024x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in tmptestsfvagomq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in tmpojrljqbwjgabc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in tmpgemx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in tmpgemtestwands12345abc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in tmpgemikotzwpgd (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in tmpfjbgghjfcigl (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in tmp-meta-testabc123 (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in tinytestbkpsfsnykc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testwandyg3hook (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testtmp993 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testssp-wukues (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testslnews795 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testqwertyabcabc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testproxyxx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testproxywands (RubyGems)
3 compromised versions
- Jul 7, 2026
Malicious code in testproxy3662 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testprox52736 (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in testparamhg7 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testparamhg6 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testoai4182477 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testlbabcxyz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testlamb987 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testhgabc42 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testgemoux174130 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testgemhack1778550021 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testgemfooabc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testfragabc556 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testfragabc555 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testfoo_proxy2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testfoo_proxy (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in testexproxyabc555 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testexfragabc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testabcabc2248gem (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in tbxtestaquz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sz638fce (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in symod1778552601 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sygit1778552745 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sx638fce (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swwsdl2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swwsdl1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swsubrep7a (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swsubrep6a (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swsubrep5a (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swpdf131119fos (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swpdf1311191 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swpdf1311181 (RubyGems)
1 compromised version
Page 21 of 71