Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Jul 7, 2026
Malicious code in aiwdgltpirve (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiwdeynkjctd (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiwbizkcowwn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiuzxgqioltv (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiuzubwjbsoj (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiuydcysvgvt (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiuvipuscwac (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiuuwsosbsqp (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiuupaosataw (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiuprjluomxz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiuovjltsvrq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiumidgzwyzv (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiukjisdgcxp (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiuexzbmeygo (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiuepfczrxji (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiudhvnuubzt (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiudazqldpcn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aituhdbvptgs (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aitfnurhpxuo (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aitdodvcpoam (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aitdaludfnfq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aidoklxlhvfkeq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aicalunosquaz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aicaltroixtqg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aicaltdfdlekz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aicalojdhdxoa (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aicalllngxwwh (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in agfossstd21 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in agfosssacre22 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in agfosslic24 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in agfossgrant23 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in agfosscab20 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in agentoaitestabc123 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in abcfoobar1778550632348198 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in abcfoobar1778550629075869 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in abcfoobar1778550625683711 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in a0a_arcgraph (RubyGems)
4 compromised versions
- Jul 7, 2026
Malicious code in a00_arcguide (RubyGems)
1 compromised version
- Jun 18, 2026
Malicious code in final-poc-usa (RubyGems)
1 compromised version
- Jun 18, 2026
Malicious code in final-shoaib (RubyGems)
1 compromised version
- Jun 1, 2026
Malicious code in align_rest_api (RubyGems)
1 compromised version
- May 13, 2026
Malicious code in knot-simple-formatter (RubyGems)
1 compromised version
- May 13, 2026
Malicious code in knot-rspec-formatter-json (RubyGems)
1 compromised version
- May 13, 2026
Malicious code in knot-rails-assets-pipeline (RubyGems)
1 compromised version
- May 13, 2026
Malicious code in knot-rack-session-store (RubyGems)
1 compromised version
- May 13, 2026
Malicious code in knot-devise-jwt-helper (RubyGems)
1 compromised version
- May 13, 2026
Malicious code in knot-date-utils-rb (RubyGems)
1 compromised version
- May 13, 2026
Malicious code in knot-activesupport-logger (RubyGems)
1 compromised version
- Apr 16, 2026
Malicious code in monolith-twirp-pullsd-users (RubyGems)
2 compromised versions
- Apr 16, 2026
Malicious code in monolith-twirp-pullsd-authorization (RubyGems)
2 compromised versions
Page 51 of 71