Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,137 total in gem · sorted newest first- Jul 18, 2026
Malicious code in zwsearch (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwpdfg10266a (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwkopt3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwtestabc3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwtestabc1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwtestxabc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwkopt7 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwkopt8 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwtestabc4 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwtenc3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwtenc2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwttestdoc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwtd103 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwkopt9 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwtenc0 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwtgld (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwkopt6 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwxbcgrant (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwta6000 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwtcook2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwtenc1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwpdfg10266b (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwxbcstan (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwxbccali (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwkopt5 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zz-oai-test12 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwxbccab (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwtgl (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwxbclic (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwtcookie (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwmeet017694 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwwactb3703 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwwacta5072 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwtd101 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwtd102 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwxbcsacre (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwxbccalag (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwkact1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwday2711778553470 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwkopt4 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwknum0 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwkopt12 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwcalx3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwcalx9 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwkopt0 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwkact7 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwkopt19 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwkopt20 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwkact3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwkopt1 (RubyGems)
1 compromised version
Page 5 of 143