Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Jul 18, 2026
Malicious code in windbeam_api (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wjin1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wjcab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wgssrfbzr1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wmwk3ab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wmj167461 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wmj738682 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wjsacre (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wmwk2nobab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in whg1778555577181 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wmeta9721478 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wgssrftest (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wmwk1txtab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wgssrfmod1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wmwk1nobab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in whg1778555575753 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in whg1778555574496 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in whg1778555581536 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wmwk2txtab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wmwk3txtab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wjin3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wgsfospdf2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wm735526 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in whssrftestabcxx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wm752757 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wmwk2ab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wm720979 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wm961055 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wgssrfhg1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in whg1778555579563 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wjin4 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wmwk1bothab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wmj169905 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wjin2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wmj557183 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wgsfmore53 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wgsfmore23 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wgsfoshtml2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wgsfmore83 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wcaldt (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wgsfx03 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wenc10010 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in watpdf885 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wbotbzr999 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in watestabc126 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wbothg999 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wbotsvn999 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wgsfmore13 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wcalm1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wgsfmore03 (RubyGems)
1 compromised version
Page 31 of 158