Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Jul 7, 2026
Malicious code in lbrssyjzqfxbul (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbrssyjsxxubbr (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbrssyeazdratp (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbrssyacvbhfoz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbrssvvqzexsn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbrssuuxosyfo (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbrssudgaaoay (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbrssmmqrwkvm (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbrssltutuvwp (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbrssftspjbqe (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbrsseyuqeyzf (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbrssebmlsaht (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbrssbhrlysso (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbqtcccksw (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lboaktdmwa (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbmztrpfjb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbmtq9x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbmtq8x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbmtq7x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbmtq6x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbmtq5x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbmtq4x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbmtq3x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbmtq2x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbmtq1x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbmtq11x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbmtq10x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbmtq0x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lblzhhumah (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbjjpuyqqs (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbifxeuorg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbhnlsxtbs (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbfajkdltu (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbeng658 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcalxsdgrprjs (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcalxjlnzfios (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcalxhogwjdqe (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcalxhayqouyj (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcalxeyndhbdj (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcalxdsciamuf (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcalxcnrlgidi (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcalxagpsupya (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcaltestywvidk (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcaltestyoeaua (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcaltestrlmcpe (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcaltestmvxcve (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcaltestlredrf (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcaltestljjirx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcaltestipnern (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcaltestgyeryc (RubyGems)
1 compromised version
Page 42 of 71