Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Jul 18, 2026
Malicious code in oailambproxy1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oailm4 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oailm1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oailmb (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oailm6 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaikx2502114 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaijx7497893 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaijx3058720 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oailamtest2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaijx7718528 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaijx0303634 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oailma (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaijx1603962 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaikx2706764 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaijx6438369 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oailm9 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oailm5 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oailamtest1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaijx1165628 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaiix0231326 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaiix0600089 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaijanla (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaihx8175223 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaiix9664993 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaiix7194839 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaijbzrevovmk (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaijbzravdemr (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaiix0360536 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaijbzrqtntsq (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaijbzrgtxirk (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaiix8443749 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaijgitfzlsik (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaihx8693617 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaijhguviith (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaijgitjtybra (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaiix3669509 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaiix1059244 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaijhgzfujin (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaijfossilunswgx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaihx7579061 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaijx0156671 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaiix7006631 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaiix4070985 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaijhghatpit (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaihx7985797 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaihx7924258 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaijfossilvwcsvc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaijbzrvidlyq (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaiix7984341 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaijgitdmeevm (RubyGems)
1 compromised version
Page 55 of 158