Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Jul 7, 2026
Malicious code in oaifx9667097 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx9269956 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx8889601 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx8755814 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx8306741 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx7943598 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx7303384 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx7129963 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx6387627 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx4260376 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx3608457 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx2401408 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx2280367 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx1955773 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx1757803 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx0927711 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifetchmde1778385631 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifetchmde1778385544 (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in oaifetchgemugkejy (RubyGems)
3 compromised versions
- Jul 7, 2026
Malicious code in oaiex9823513 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiex8413575 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiex7410346 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiex4736401 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiex4149420 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiex3900663 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiex3222069 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiex1182709 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiex0549290 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiex0014506 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaidx7402019 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaidx6514197 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaidx6135652 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaidx4526859 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaidx3879209 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaidx3492001 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaidx3409275 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaidx1469215 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaidx1466937 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaidx1337585 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaidx1169327 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaidx0276239 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaicx8859010 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaicx6062340 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaicx4433606 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaicx3857133 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaicx3769699 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaicx2721076 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaibx7324267 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaibx4676369 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaibx1202338 (RubyGems)
1 compromised version
Page 37 of 71