Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Jul 18, 2026
Malicious code in sguxfwfnet (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sgvtbcatnr (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in slnctoiblt (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in slnbabcxyz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in slncmuayli (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in slncuebwsw (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in slnbxdtreqqe (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in slnbrbtiqwcw (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in scaljanbfksf (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in secondhand_spider (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sgfesdiqyo (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in scallistajxel (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sgccmmheke (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sf727fc0 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sf126006 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sghrlhoxql (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sghwnriwgq (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sfded640 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sgekvdhxno (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sggcezgmtn (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sb50a0902f (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sf72647c (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sgjqdnyybe (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sgfcchuzox (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sf042efe (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sgkbxnctcg (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sbc55dd196 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sf1d68a9 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sgicgptpuh (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sgeymwpcar (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sb759e41fa (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sgjcvwjwwo (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in seeing-is_believing (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sb70efdeba (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sgmexribvq (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sf3481c8 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in service-catalog-client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in secret-scanning-proto (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in selenium-spider (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sfb9199b (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sghsvfnjgk (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sghizaeigy (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sf5770a8 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sgfnnyznra (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in secrequeryabc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sggenmlieh (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sba517fb66 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in sfc0e8fa (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in scaljan2momxm (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in rxwjq (RubyGems)
1 compromised version
Page 47 of 158