Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Sep 22, 2026
Malicious code in bunlier (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunlider (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunlfer (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunler (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunlef (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunleer (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunledr (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunleder (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldwr (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldur (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldsr (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldser (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldrr (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldrer (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldre (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldr (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldor (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldoer (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldner (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldler (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldlef (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldir (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldier (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldet (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldesr (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunlders (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunlderr (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldero (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldern (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunlderl (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunlderi (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldere (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldera (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunlder-ruby (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunlder-rb (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunlder-lib (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunlder-gem (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldeor (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldeo (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldenr (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldelr (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldeir (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldei (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldef (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldeer (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldee (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunlded (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldear (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldea (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunlde (RubyGems)
1 compromised version
Page 5 of 158