Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Jul 18, 2026
Malicious code in swc424 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in stc6a044 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in swa8178foss (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in steelproxycab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in swd8249a (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in swaim6a (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sqlcommenter_rails (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in swcossfabc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in swa8402foss (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in swd8249t (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ssrftestxyznever (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sprox-c160-2hg (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sprox-c160-4bzr (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sprobebzrz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in st126006 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sprobehgz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sprox-c160-4hg (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sprox-c160-2git (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sprox-c160-1mod (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sprox-c160-2fossil (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sproxytestgitone (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sprox-c160-1bzr (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sprox-c160-3hg (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sprox-c160-0hg (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in spider_node (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sprox-c160-3git (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sprox-c160-0svn (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sprox-c160-2svn (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sprox-c160-0mod (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sprox-c160-1fossil (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sprox-c160-4git (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in spider-bot (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in spokes-proto (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sprox-c160-4fossil (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sprox-c160-1git (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sproxytestsvnone (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sq-mdc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sprox-c160-0bzr (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sprox-c160-2bzr (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sproxytestbzrone (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in st3481c8 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sproxytestfossilone (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sprox-c160-3bzr (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sprox-c160-4svn (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in spider_src (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in spider-html (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sprox-c160-3svn (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sq-minimal-feature-flags (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sprox-c160-3fossil (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sprox-c160-1svn (RubyGems)
1 compromised version
Page 41 of 158