Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Jul 18, 2026
Malicious code in watestabc129 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wgsfmore33 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wgsfoslistdoc2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wandsyardresabc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wbotfossil999 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in watpdf884 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wcalamp (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wcal (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wgsfmore43 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in watestabc128 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wanqproxy (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wgsfmore63 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wbotmwoy27a3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wgsfosroot2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in watestabc124 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wfetch6a028604b (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wandsyardresabc2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wfetch6a028604a (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in watestabc123 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wgsfmore73 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in watestabc127 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wenc9927 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wenc10115 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wenc10385 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wgsfosmgcal2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wanproxy2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in watpdf877 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in watestabc125 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wandsworthproxyabcabc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wcomp (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in webpack-dev-server (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wandsworthprobe1778551714 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wgsfoshttp2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wanproxyq (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wandscalx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wandsmod1778555488 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wandshack9 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wandsslurp (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wandsquery1778555184810 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wandshack1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wandscal (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wandsquery1778555209534 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wandshack3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wandshack8 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wandsquery1778555219567 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wandsdock7wre22semijan (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wandshack4 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wandscal4 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wandshack0 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wandsvnx (RubyGems)
1 compromised version
Page 32 of 158