Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Jul 18, 2026
Malicious code in proxymeta1270 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proxytcf1f8d7b (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in prxca79e95716 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in prxdfbdfbeb3b (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proxyt5d33dbc8 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proxyt7f4a816d (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proxyt8c6730c3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proxyt8b7e7610 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proxyt18c96c16 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in prx06e608f6da (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in prxef6dfdf4be (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proxyta14c1bf1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proxymeta646478 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proxyt7afe6600 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in prx4542f26b08 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in prx6cfa4a2be2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in prx5a01811907 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proxymeta646419 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proxyzz1778548845 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proxytestabcxyz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proxyt1ef3994c (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in prxf2ea0504a0 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proxyt8be2d980 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in prx92ddbfc4c5 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proxymeta646418 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proxyta4d404a4 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in plugin-gem-example (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in pg_result_init (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proto-dependabot-api (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in pdfpalais1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in probejiqptzco (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proto-registry-metadata-migrator-api (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proto-dependency-graph-api (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in pathpkg94321zz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in poc-genrateed-by-noob (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in pdftoilet1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in pd131118zfvg (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in pdflahueca1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in probervdgcosw (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proto-trust-metadata-api (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in pd130917vxnt (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proxylambethabc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in piratebay-api (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in pd130989hqmb (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in prose_diff (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in pdfmeno1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in pd130924vejy (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in poc-by-shahwar (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in prometheus_gcstat (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proto-registry-metadata-api (RubyGems)
1 compromised version
Page 51 of 158