Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Jul 18, 2026
Malicious code in v4zzgbqvirfx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in v21zzgbqvirfx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in v14zzgbqvirfx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in v5zzgbqvirfx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxlambcal1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in v15zzgbqvirfx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in v20zzgbqvirfx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxjanlamb2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in v9zzgbqvirfx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxjanwands1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxhttpswands1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxds124883 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in v16zzgbqvirfx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxlambcal2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in v22zzgbqvirfx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxjanlamb3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxds124885 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxjanwands2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in v23zzgbqvirfx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in v3zzgbqvirfx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxtestok (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in vacuole (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxwcookie2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in v18zzgbqvirfx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in v26zzgbqvirfx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in v13zzgbqvirfx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in v7zzgbqvirfx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in v12zzgbqvirfx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in v25zzgbqvirfx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxwcookie4 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in v19zzgbqvirfx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxds124884 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxds124878 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tryf5zz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tryf2zz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tryf1zz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in twitter-cards (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tryf4zz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxds124874 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxds124879 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in twitter_vine (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxds124880 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tryf0zz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tryf7zz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxds124882 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in turboghas-client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxds124870 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxds124875 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxds124871 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tzinfo-i18n (RubyGems)
1 compromised version
Page 37 of 158