Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Jul 7, 2026
Malicious code in slnccbvjvj (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slncbiuaqy (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slncazjjys (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slncabcxyz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnbzmpxultk (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnbxwiltsbk (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnbxdtreqqe (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnbszoimdgd (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnbsmulycfl (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnbrbtiqwcw (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnbqotqnenc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnbqgkcwnnk (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnbpspbuqxg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnbntdpwgua (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnblctcmige (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnbabcxyz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnaxpliqmsh (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnaabcxyz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slg99185 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slg20883 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slg12549 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sl-yh-out-abcxyz1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in skytestpluginsdf (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in shopify-cli-extensions (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in shopify-cli-dependencies (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in shipstudyhelper1778418891 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgyewbarsi (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgxtvmueur (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgxqzbqqph (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgxnwefney (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgxdhvmbhl (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgxbvusaqz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgvtbcatnr (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgvgyorjgr (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sguxfwfnet (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgtyoqebjb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgrernmauc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgrcdgzate (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgqokjrgqt (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgpakpubiz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgpajdnsoz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgmexribvq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgkbxnctcg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgjqdnyybe (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgjcvwjwwo (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgicgptpuh (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sghwnriwgq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sghsvfnjgk (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sghrlhoxql (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sghizaeigy (RubyGems)
1 compromised version
Page 28 of 71