Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Jul 7, 2026
Malicious code in mvv12 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in mvv11 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in mvv10 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in mvv1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in mvv0 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in mt8405aopw (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in mt8403sufu (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in mt8402zmle (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in mt8320mzji (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in mt8249wcnx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in mt8178xfnt (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in mritestproxy123 (RubyGems)
4 compromised versions
- Jul 7, 2026
Malicious code in modgovexf573845 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in metatesttgukcriv (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in metatestmyprfolx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in metatestfpepbeeo (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in metatesteyuhnqlw (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in metatestabcxyz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in meet8405a (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in meet8402a (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in meet8249a (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in meet8178a (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8405v5lmc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8405v4bpo (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8405v3bjn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8405v2llz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8405v1rjo (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8405v0nhw (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8403v5qvm (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8403v4kng (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8403v3qkt (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8403v2tew (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8403v1zxu (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8403v0lws (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8402v5qwf (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8402v4rgs (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8402v3uig (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8402v2ggi (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8402v1gfq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8402v0nty (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8320v5tkv (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8320v4scj (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8320v3rwa (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8320v2umh (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8320v1gep (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8320v0utd (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8249v5qnb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8249v4lvd (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8249v3xib (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8249v2jsh (RubyGems)
1 compromised version
Page 39 of 71