Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Oct 5, 2026
Malicious code in cryoto-toolbox (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in bitcion-ruby (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in ligbtning-invoice (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in etheremu.rb (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in kecack (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in lightinng-invoice (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in bitciin (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in crypti-toolbox (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in lighthing-invoice (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in bitcion (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in ethereum-tx-helper (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in bitcoin-rpc-lite (RubyGems)
2 compromised versions
- Oct 5, 2026
Malicious code in web3-eth-utils (RubyGems)
2 compromised versions
- Oct 5, 2026
Malicious code in btc-wallet-tools (RubyGems)
2 compromised versions
- Oct 5, 2026
Malicious code in base58-check-helper (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in lightning-invoice-utils (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in utxo-set-utils (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in wallet-crypto-utils (RubyGems)
2 compromised versions
- Oct 5, 2026
Malicious code in blockchain-sync-utils (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in merkle-proof-lite (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in web3-sign-helper (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in electrum-protocol-lite (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in crypto-key-utils (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in bitcoin-address-utils (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in coinmarket-utils (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in hdkey-derive-helper (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in crypto-mnemonic-tools (RubyGems)
2 compromised versions
- Oct 5, 2026
Malicious code in wallet-backup-tool (RubyGems)
1 compromised version
- Oct 5, 2026
Malicious code in eth-keystore-utils (RubyGems)
2 compromised versions
- Oct 5, 2026
Malicious code in eth-address-utils (RubyGems)
2 compromised versions
- Oct 5, 2026
Malicious code in request-guard (RubyGems)
2 compromised versions
- Oct 5, 2026
Malicious code in throttle-requests (RubyGems)
2 compromised versions
- Oct 5, 2026
Malicious code in rate-limit-mini (RubyGems)
2 compromised versions
- Oct 5, 2026
Malicious code in req-throttle-mini (RubyGems)
2 compromised versions
- Sep 23, 2026
Malicious code in wurl_show_data (RubyGems)
1 compromised version
- Sep 23, 2026
Malicious code in kerokwis (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in kerokwis (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in wurl_show_data (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in no-fun (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in no-fun (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in mega-clean-box (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in burndler (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in burndlef (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in burmdler (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in buosndler (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in buonlder (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in buondler (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in buondlef (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in buomdler (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in buolder (RubyGems)
1 compromised version
Page 3 of 158