Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Jul 18, 2026
Malicious code in testlamb987 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tryb0zz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in testoai4182477 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in testlbabcxyz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tmpxyz984024x (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in testhgabc42 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tmpfjbgghjfcigl (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in trya5zz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in testparamhg7 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tryb3zz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in trye2zz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tryc4bzz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in testproxywands (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tryd3zz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in testfragabc556 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in swpdf1311191 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in swsubrep6a (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in swpdf130955fos (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in swsubrep5a (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in testgemfooabc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in swlicrep8a (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in swmtry (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in swpdf131119fos (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sx638fce (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in swmeet01 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in testexproxyabc555 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in swlicsuba (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in swpdf1311181 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in swpdf130981fos (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in telegram_bot-ruby (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in taxjar-bundler (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in swsubrep7a (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in swpdf130985fos (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in testgemhack1778550021 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in testexfragabc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in swpdf130988fos (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in tbxtestaquz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in swwsdl2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in swmodsjabc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in testfoo_proxy2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in testcatplzignore (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in testfoo_proxy (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sygit1778552745 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in teaspoon-devkit (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sz638fce (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in telegram_bot-types (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in swlicrep7a (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in testfragabc555 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in systemd-daemon (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in telegram-bot_api (RubyGems)
1 compromised version
Page 39 of 158