Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Jul 18, 2026
Malicious code in wagwn3bothab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wagwn1bothab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in vand4yiiq1778552563 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in vcsmodpdfx1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in vanc2selo1778552388 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in vanity2zzgbqvirfx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in vcsfetchx1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in vcsfossilpdfx1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in vand7mldo1778552612 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in vcssvnx1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in vcshgx1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in vcsgitpdfx1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in vcsbzrx1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in vanc0ekto1778552346 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in w10266x (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in vcsfossilx1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in vcsbzrpdfx1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in w9927x (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in w9927 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in vagrant_hvinfo (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in w10385x (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in vanc1rfwf1778552366 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in vand3flmy1778552525 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wagwn1txtab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in vcshgpdfx1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in vanc5smpr1778552455 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in verificator (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in vcssvnpdfx1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in vanityzzgbqvirfx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in w10266 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in vand6zltd1778552597 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in vanc4inrp1778552437 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in vand5kbjt1778552578 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in vanc3ubcy1778552409 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in w10385 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in wagwn2bothab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxjinawands2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in v10zzgbqvirfx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxhttpslamb1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in v17zzgbqvirfx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxtestok2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in v24zzgbqvirfx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxjinalamb2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxjanlamb1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxwcookie3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxwcookie1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in v8zzgbqvirfx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in v6zzgbqvirfx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in v11zzgbqvirfx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxjinasouth2 (RubyGems)
1 compromised version
Page 36 of 158