Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Jul 7, 2026
Malicious code in m8249v1gsl (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8249v0oem (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in ltestprobe (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in ltax438 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lpp29938 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lpp19932 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lpp09927 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lpdfdev8687 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lpdfbudap8682 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lp490x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lp490 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lp489x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lp489 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lp357 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lp346 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lp342 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lp332 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lp261 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lp256 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lp205x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lp205 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lp129x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lp129 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lp125 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lp124 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in loot995 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in loot993 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in londontestphjoxf (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in londontest1778549274 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in londonproxytestabc1778549587 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in londonprobe1778550281 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in localnewstesta (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lmbp24941 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in linkpxstat (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lghookprobeabc1778552328 (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in lf295s4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lf295s3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lf295s2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lf295s1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lf295s0 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lf295r2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lf295r1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lf295r0 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lf295q9 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lf295q8 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lf295q7 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lf295q6 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lf295q5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lf295q4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lf295q3 (RubyGems)
1 compromised version
Page 40 of 71