Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Jul 7, 2026
Malicious code in oakmi17500 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi17400 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi17300 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi17200 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi17100 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi17000 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi16900 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi16800 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi16700 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi16600 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi16500 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi16400 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi16300 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi16200 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi16100 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi16000 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi15900 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi15800 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi15700 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi15600 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi15500 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi15400 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi15300 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi15200 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi15100 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi15000 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfwk9 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfwk8 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfwk7 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfwk6 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfwk5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfwk4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfwk3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfwk2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfwk1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfscr (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfplan (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfmeetall (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklflic (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfjan9 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfjan8 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfjan7 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfjan6 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfjan5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfjan4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfjan3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfjan2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfjan1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfjan0 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfcom (RubyGems)
1 compromised version
Page 33 of 71