Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Jul 18, 2026
Malicious code in uxds124873 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxds124872 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxds124877 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxbcrwands1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxbcrwands2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in turboscan-client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxds124876 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxbcrwands3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uuext4c477b (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tryf3zz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in u2f_client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tryf6zz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tryf8zz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in uxds124881 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in testproxyxx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tryb1zz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in trye0zz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in trye1zz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tinytestbkpsfsnykc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tmptestsfvagomq (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tryc4tzz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tryd0zz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in testqwertyabcabc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in testparamhg6 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in testwandyg3hook (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in Testpranay (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tryd1zz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tmpgemx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tmpgemtestwands12345abc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in testproxy3662 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tryb4zz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in testprox52736 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in trye4zz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tryd2zz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tmpgemikotzwpgd (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tmpojrljqbwjgabc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in treelights-client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in testslnews795 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in testtmp993 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tryb2zz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in trya4zz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in trya3zz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in trya2zz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in trye3zz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tmp-meta-testabc123 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tryc4xzz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tryd4zz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in testssp-wukues (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in testgemoux174130 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in trya1zz (RubyGems)
1 compromised version
Page 38 of 158