Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Jul 7, 2026
Malicious code in caljanzzjcq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in c00_arcguide (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in bridgebbb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in bridgeaaa (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in br3e6a6270eb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in botwoutput9d53 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in botwindscrape9d53 (RubyGems)
3 compromised versions
- Jul 7, 2026
Malicious code in bottestjanmid39d53 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in bottestjanmid29d53 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in bottestjanmid19d53 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in bottestjanmid09d53 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in benign200012 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in b00_arcguide (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in asdf-zzzz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in arcvalues (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aizzofpvqxbu (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aizwhvgtkghn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiztuyancttc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aizporoccrvn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiznuarbhczr (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aizkfewpqkax (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aizjmmmwsreb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aizgpanecvku (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiwvntrvdltc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiwuzbgljyfk (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiwuanpmjkub (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiwsynezxalw (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiwsqvuxobcb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiwsqjjbeqyn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiwsjuzltawo (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiwsamimxhff (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiwrhogwqhox (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiwrfyltgujs (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiwqongzivyd (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiwqiejrvspo (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiwpdjthcxyq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiwontczmeyp (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiwohccxjmdp (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiwnuagneyjc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiwmzwjrmune (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiwmvzkccpyk (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiwmirzlwefr (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiwmfjmnbojn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiwkeklykhwg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiwkctcwynld (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiwhwinedxvy (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiwhuleyftdv (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiweylvblufr (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiwetmoznbch (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiwdsquzyhkx (RubyGems)
1 compromised version
Page 50 of 71