Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,137 total in gem · sorted newest first- Aug 24, 2026
Malicious code in hyper-safe-kit (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in hyper-safe-hub (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in hyper-quick-kit (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in hyper-pro-kit (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in hyper-lite-tool (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in giga-sharp-tool (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in giga-safe-hub (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in giga-quick-rb (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in giga-pure-kit (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in giga-max-mod (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in giga-max-kit (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in giga-clean-pkg (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in giga-clean-kit (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in giga-clean-box (RubyGems)
1 compromised version
- Aug 24, 2026
Malicious code in circle-w3s (RubyGems)
1 compromised version
- Jul 20, 2026
Malicious code in my_shoaib_gem (RubyGems)
5 compromised versions
- Jul 20, 2026
Malicious code in ike-artifactory-ruby (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zzwandsxabc119 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zztestownedtmp1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zztxtwtmp06 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zztxtwtmp07 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zztxtwtmp12 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zzzltestfoobarxyz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zztxtwtmp09 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zztxtwtmp14 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zztxtwtmp11 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zztxtwtmp04 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zztxtwtmp10 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zzwandtemp1778552518 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zztxtwtmp13 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zzwmgweb02 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zztxtwtmp08 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zztest4098 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zzpdfvar08 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zzlambcalx1778552149 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zztxtwtmp02 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zzsouthhack252269 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zzpdfvar11 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zzpdfvar09 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zzpdfvar06 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zzfadgivar13 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zztest17785553702 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zzpdfvar07 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zzfadgivar02 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zzpdfvar13 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zztemp-ssf-2605 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zztest17785553733 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zzpdfvar02 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zzfadgivar09 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zzdelay2119 (RubyGems)
1 compromised version
Page 3 of 143