Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Jul 7, 2026
Malicious code in prx06e608f6da (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxyzz1778548845 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxytf7cceba2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxytf4d297de (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxytf0ccd93e (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxytestabcxyz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxytcf1f8d7b (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxytceffa3ec (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxyta4d404a4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxyta14c1bf1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxyt8c6730c3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxyt8be2d980 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxyt8b7e7610 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxyt7f4a816d (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxyt7afe6600 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxyt5d33dbc8 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxyt1ef3994c (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxyt18c96c16 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxyt0dd1ee25 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxymeta646478 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxymeta646423 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxymeta646420 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxymeta646419 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxymeta646418 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxymeta1270 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxylambethabc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxyfooabc53ee9f5f (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in probervdgcosw (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in probejiqptzco (RubyGems)
6 compromised versions
- Jul 7, 2026
Malicious code in probe1778554668 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pdftoilet1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pdfpalais1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pdfmeno1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pdflahueca1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pdfkent1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pd131119hccc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pd131118zfvg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pd130989hqmb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pd130985cmcb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pd130981ssqq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pd130931tmbp (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pd130924vejy (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pd130917vxnt (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pathpkg94321zz (RubyGems)
3 compromised versions
- Jul 7, 2026
Malicious code in pathpkg94321yy (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in oakmi18000 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi17900 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi17800 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi17700 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi17600 (RubyGems)
1 compromised version
Page 32 of 71