Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Dec 23, 2025
Malicious code in chalk-hostname (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in chalk-henson (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in chalk-consul (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in chalk-cli (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in chalk-aws (RubyGems)
1 compromised version
- Dec 23, 2025
Malicious code in activestorage-redundancy (RubyGems)
1 compromised version
- Dec 2, 2025
Malicious code in pg_result_init (RubyGems)
1 compromised version
- Sep 26, 2025
Malicious code in your-gem-name12 (RubyGems)
1 compromised version
- Sep 26, 2025
Malicious code in sqlcommenter_rails (RubyGems)
2 compromised versions
- Sep 1, 2025
Malicious code in authzd-client (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in advisory_db_toolkit (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in github_chatops_extensions (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-merge-queue-go-mergequeuemonolith (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-mailreplies-replies (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-github-repositories (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in service-catalog-client (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in secret-scanning-proto (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in turboscan-client (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-support-helphub (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-packageregistry-auditlog (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in proto-education-web (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-webhooksubscriptions-subscriptions (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-modelsgateway-telemetry (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in proto-dependabot-api (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-git_src_migrator-monolith (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in octolytics (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in proto-trust-metadata-api (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-webhooks-core (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-pipelinemonitor-monitoring (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-modelsgateway-access (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-pages-pagesdfsapi (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-features-featuresync (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in proto-registry-metadata-migrator-api (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in windbeam_api (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in prose_diff (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in turboghas-client (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in s4-client (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in mvnd (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-features-groups (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-features-actors (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-pages-pagesdeployerapi (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-git_src_migrator-migrations (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-octoshift-imports (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-kredz-core (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-examples-octocat (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-odometer-core (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-merge-queue-go-mergequeueservice (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in monolith-twirp-features-featureflaghub (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in treelights-client (RubyGems)
1 compromised version
- Sep 1, 2025
Malicious code in spokes-proto (RubyGems)
1 compromised version
Page 53 of 71