Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Jul 7, 2026
Malicious code in oaklfcab (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiztestxyz123 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaixhgdpvkpij (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaivcstest1778554896 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaitsvnxpamle (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaitsvnxlorty (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaitsvnxlnrat (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaithgxwnvon (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaithgxmylrf (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaithgxgwreb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaitgitxrclle (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaitgitxqgxlu (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaitgitxppibu (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaitfossilxxipsj (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaitfossilxqsswm (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaitfossilxbnowl (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaitest1778473828 (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in oaitbzrxqfldb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaitbzrxmtfoa (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaitbzrxfredw (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaisurveytestzz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipyvtoeydiu (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipybzwmezig (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipxvcvhvqii (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipwysipnjet (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipwsgyblajm (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipvtpwpldhz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipulhsxmtjc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipuetanenak (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipttxrgucrm (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipttacwhdpp (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiprpfnweljs (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiproxytestabc789 (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in oaipqsobhbexg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipphbsbxqgw (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaippehsfqcmm (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipozmgqmeyz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipojrqrusxl (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipobdflfoog (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipnldvhihwd (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipmxktcwywo (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipmfgnywddt (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiplmbtestsvn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipkesbgrrqn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipjupjfdrys (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiphawmupjos (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipgttatggxy (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipforvmdtrw (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipefyjwkzmx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipefrlkaloi (RubyGems)
1 compromised version
Page 34 of 71