Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Jul 18, 2026
Malicious code in wmwk4nobab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wmwk6txtab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wmwk5ab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wp875 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wmwk6bothab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wmwk5bothab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wp884 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in workarea-gift-cards (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wmwk5txtab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wnmaofmjqxdu (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wn5prnotxt1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wnmbihytgkye (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wordify-stuckiest (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wn5wknob2a (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wn5wknotxt1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wp885 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wnekmzzveqou (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wn5ielist2a (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wngoscmktfuf (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wmwk6ab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wnkbnefoxjyr (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wn5agnotxt1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wnizcisqddnw (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wn5ielist1a (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in woppwyijhxfak (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wnuqwugrxxae (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wndcal458f2b (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wmwk5nobab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wmwk4bothab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wp876 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wp886 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wmwk6nobab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wjlic (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wmwk4ab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in whg1778555572981 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wlamsvn (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wlamhg (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in whg1778555578218 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wgssrfsvn1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in whg1778555582995 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wmwk1ab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wlambzr (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wmwk4txtab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wmwk2bothab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wmwk3nobab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wmwk3bothab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wgsfostrail2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wjstand (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wjgrants (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wgssrffossil1 (RubyGems)
1 compromised version
Page 30 of 158