Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Jul 7, 2026
Malicious code in lbcaltestcwukld (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcaltestcczorx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcaltestawsqsb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lat2cal1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamws5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamtrigger71 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamroot4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamnew10 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamnew09 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamnew08 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamnew07 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamnew06 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamnew05 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamnew04 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamnew03 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamnew02 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamnew01 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamnew00 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lammeet03 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lammeet02 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lammeet01 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lammeet00 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lammcal6 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lammcal5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lammcal4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lammcal1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamlove2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamlove1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamk04 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamk03 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamk02 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamk01 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamk00 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamjanraw13624 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamj04 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamj03 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamj02 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamj01 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamj00 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamhgtestgoog13067 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamhgip123959 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamhgdemo17360 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamhg57714 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamhack1778555394 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamfoss28330 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamedoc1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamdoc17474 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamdoc17465 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamdoc17451 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamdoc17395 (RubyGems)
1 compromised version
Page 43 of 71