Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Jul 7, 2026
Malicious code in daslam173851 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in cuatest889 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in councilfetchxqz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in civichookfake (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in civic-test-scrape-out (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in civic-test-scrape (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in chmid9500x539919 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid9000x537373 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid8800x585568 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid8600x585361 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid8500x532747 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid8400x585075 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid8340x619659 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid8330x616863 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid8320x613915 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid8310x612257 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid8300x612010 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid8200x584843 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid8000x584612 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid8000x530358 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid7500x584348 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid7500x528543 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid7000x584110 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid7000x527141 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid6500x525265 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid6000x582552 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid6000x524101 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid5000x580964 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid4000x579098 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid10000x542027 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaitestsvn1778552651 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaitesthg1778552644 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaitestgit1778552630 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaitestfossil1778552663 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaitestbzr1778552654 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaifetch177855598147 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaifetch177855557914 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaifetch177855509941 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaifetch177855393242 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaifetch177855390730 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaifetch177855388228 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaifetch177855382980 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaifetch177855329769 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaifetch177855308016 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaifetch177855306194 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaifetch177855303836 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaifetch177855300091 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaifetch177855296778 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaifetch177855288717 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatgptproxytmp (RubyGems)
1 compromised version
Page 49 of 71