Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Jul 18, 2026
Malicious code in pd130981ssqq (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in playing-cards (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in prnigtest (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in pathpkg94321yy (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in pdfkent1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proto-education-web (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in probe1778554668 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in prometheus_client_ruby (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in pd131119hccc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in pd130985cmcb (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in proxyfooabc53ee9f5f (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in pd130931tmbp (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in omniauth_mixer (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi16200 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi17900 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi16800 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi17100 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in octolytics (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi16700 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi16100 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi17600 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi15800 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi16300 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi15900 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaklfwk9 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi18000 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi17400 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi16500 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi17000 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi16000 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi17300 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi15000 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in omniauth_ebay (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in omniauth_marvin (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi15300 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi16600 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi15700 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi17800 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in omniauth-pro-sante-connect (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in okra (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi15600 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi15100 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi17500 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi15500 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi16900 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi16400 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in pagerbot (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi17200 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi15400 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oakmi15200 (RubyGems)
1 compromised version
Page 52 of 158