Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Jul 7, 2026
Malicious code in oaibx0092307 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaibootz9218 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaibooty9217 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaibootx8192 (RubyGems)
3 compromised versions
- Jul 7, 2026
Malicious code in oaibo825590 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaibo396866 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaibo048288 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in nwcid324 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in nwcid323 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in nwcid322 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in nwcid321 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in nwcid320 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in nwcid319 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in nwcid318 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in nwcid316 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in nwcid315 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in nwcid311 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in newswandweekjan5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in newswandweekjan4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in newswandweekjan3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in newswandweekjan2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in newswandweekjan1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in newswandrawprint2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in newswandrawprint1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in newswandprint2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in newswandprint1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in newswanddochome1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in newswandcommittees1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in newswandcaljan2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in newswandcaljan1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in newswandagenda1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in newssearchwand1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in newsproxytestmine1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in newslambprint2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in newslambprint1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in newslambcaljan6 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in newslambcaljan5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in newhacksvn1778556129 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in newhackhg1778556006 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in newhackgit1778555882 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in mytestproxyabc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in mytemptest1778551000 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in mvv9 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in mvv8 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in mvv7 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in mvv6 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in mvv5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in mvv4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in mvv3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in mvv2 (RubyGems)
1 compromised version
Page 38 of 71