Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Jul 7, 2026
Malicious code in oaijgitzxwjqb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijgitwelcpe (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijgitjtybra (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijgitfzlsik (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijgitdmeevm (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijfossilvwcsvc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijfossilunswgx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijfossilgsvaqj (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijfossilatdduq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijfossilafvimh (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijbzrvidlyq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijbzrqtntsq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijbzrgtxirk (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijbzrevovmk (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijbzravdemr (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijanla (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiix9664993 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiix8443749 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiix7984341 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiix7194839 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiix7006631 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiix5537218 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiix4587168 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiix4070985 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiix3669509 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiix1059244 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiix0600089 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiix0379958 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiix0360536 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiix0231326 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaihx9923604 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaihx8693617 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaihx8175223 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaihx7985797 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaihx7924258 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaihx7579061 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaihx7237922 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaihx5974804 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaihx0305933 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaihx0157786 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaigx9094125 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaigx8693871 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaigx7857181 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaigx5861576 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaigx5578224 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaigx4634836 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaigx4516770 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaigx1767798 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx9741380 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx9677940 (RubyGems)
1 compromised version
Page 36 of 71