Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Jul 18, 2026
Malicious code in queenbee-plugin (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in qagcimtffzt (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ptrsec_rce (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in qageegqgmnk (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in qagwhdzmmuz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in pwnlambhome2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in qagnvmckazu (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in pwnlambjan6 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in resolvrtest (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in puppet-module-posix-system-r3.2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in qagwpyrinwn (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in redis_connectable (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in qagnajvsmyl (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ptrsec_rce_test (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in pwnlambcal2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in qagloqwrnfv (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in qagehndongu (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in pwnldir1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in puppet-module-posix-system-r (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in rails_structured_logging (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in pwnlambcal1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in pwnwtest1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in qagpujyfgjw (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in qagfoukolga (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in rbi-central (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in pwnlambjan5 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in qagaismkupj (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in pwnp999 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in qagzskimfsb (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in referral-candy (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in rate-beer (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in rafka-rb (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in rails_test-serving (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in qagfypuewln (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in rails-structured-logging (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in pwnlambhome1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in rack_envinspector (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in prx975fe5e3fe (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in prx1b49033905 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proxytf7cceba2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in prxe87db1bbc7 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proxytf4d297de (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proxymeta646423 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in prx34ae9b4ae3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proxymeta646420 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in prx48d92bd9a6 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proxyt0dd1ee25 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proxytceffa3ec (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in prx51cee8dbf7 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proxytf0ccd93e (RubyGems)
1 compromised version
Page 50 of 158