Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Jul 7, 2026
Malicious code in lambethxproxyabcabc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambethtestdef (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambethssrfhack (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in lambethssrfcal (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambethssrfbuild (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in lambethscraper1778555936 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambethscraper1778549610 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambehgrobe26250 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambehgnewhttp31593 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambehgnew1593 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambegitx4062 (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in lambcal434a2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambcal434a1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambbzrproxyoai (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambQ4346 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambQ4345 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambQ4344 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambQ4343 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambQ4342 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambQ4341 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambQ4340 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lai67123812 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lai67122807 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lai67121802 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in l0pxstat (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in keytest943 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in injectwanfoo (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in injecthack1778550335 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in idleprobezz001177 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in hwc8v (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in hwc7v (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in hwc6v (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in hwc5v (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in hwc4v (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in hwc3v (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in hwc2v (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in hwc1v (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in hwc0v (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in htmlmetaproxyzz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in hraq4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in hraq3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in hraq2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in hraq1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in hraq0 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in hrab4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in hrab3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in hrab2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in hrab1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in hrab0 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in hgwenc (RubyGems)
1 compromised version
Page 45 of 71