Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Jul 18, 2026
Malicious code in xyzbr (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in xwandservmtg (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in your-gem-name12 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in xso61778568189 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in xlambpdfconv (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ylam21778568568 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in xjinawand1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wwandbzr (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wy2e45b008 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wwandhg (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wwday2901abcxyz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprwn5xyz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in x51a3db3814 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in x0e0f43d0fc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wtenc4 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wwday2901txtxyz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wtenc1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wptfrep2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wy2ea1b5de (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wwday3001abcxyz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wptask2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wwk2601abcde (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wwagenda2601abc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wyb00f8cef (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wwday2701abcxyz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wwday3001txtxyz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprwn4accxyz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wye4ce4244 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wy6a903e9c (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wwday2701txtxyz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wurl-aws-s3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wtenc2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in x1488111566 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wwk2601simpleabc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wwday2601abcxyz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wwday2601txtxyz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wwday2801txtxyz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wyc695eae5 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wybc6423a5 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprwn4xyz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wtestjsmfurlb (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wwagenda2601txtab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wwagenda2601simpb (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wptfrep (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wtenc3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wwk2601txtabcde (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprwn6xyz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprwn5accxyz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wwday2801abcxyz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wprwn6accxyz (RubyGems)
1 compromised version
Page 28 of 158