Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Jul 7, 2026
Malicious code in zwkact1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwday2711778553470 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwday26 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwcalx9 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwcalx8 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwcalx7 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwcalx6 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwcalx5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwcalx4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwcalx3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwcalx2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwcalx13 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwcalx12 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwcalx11 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwcalx10 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwcalx1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwcalx0 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwan_cal_jana (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwan_cal_jan1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwan_cal_https (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwagweek (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwagq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwagfrag (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwagbdr (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwagback2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwagback (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zwag26 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zw_nobdr_week3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zw_nobdr_week2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zw_nobdr_week (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zw_nobdr_events2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zw_nobdr_events (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zw_nobdr_day3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zw_nobdr_day2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zw_nobdr_day (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zw_downloadops (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zw_dl_ics2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zw_dl_ics (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zw_cal_more (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zvsvnxolbmd1sc9 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zvgit7iym3nqhe5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zvfossilc41xzth215 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zvbzr0rygmzwp45 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in ztrivial001 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in ztestmeta001 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in ztestlamb01 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in ztargetpdfs1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in ztargetpdfg1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in ztargetpdfb1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in ztargetpdf1 (RubyGems)
1 compromised version
Page 4 of 71