Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Sep 22, 2026
Malicious code in buodler (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in buodlef (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunxuer (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunxlser (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunxlre (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunxloer (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunxlner (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunxlir (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunxlers (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunxlerr (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunxlerl (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunxler-rb (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunxler (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunxlenr (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunxlef (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunuler (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunulef (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunuder (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunsndler (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunsler (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunslef (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunslder (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunsdler (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunsdlef (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunrler (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunrlef (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunrlder (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunrdler (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunrdlef (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunpder (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunoler (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunolef (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunolder (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunodler (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunodlef (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunoder (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunnxler (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunnlder (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunndler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunndlef (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunmdler (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunlxer (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunluer (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunlser (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunlrer (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunlrder (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunloer (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunloder (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunlnder (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunllder (RubyGems)
1 compromised version
Page 4 of 158