Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Feb 25, 2025
Malicious code in luno-cocoapods (RubyGems)
1 compromised version
- Feb 21, 2025
Malicious code in komojuu (RubyGems)
1 compromised version
- Feb 3, 2025
Malicious code in dextester (RubyGems)
1 compromised version
- Dec 17, 2024
Malicious code in haefgerasgrae (RubyGems)
1 compromised version
- Oct 16, 2024
Malicious code in znowflake_client (RubyGems)
11 compromised versions
- Oct 16, 2024
Malicious code in zen-ruby-linter (RubyGems)
1 compromised version
- Oct 16, 2024
Malicious code in zbt_element_definer (RubyGems)
2 compromised versions
- Oct 16, 2024
Malicious code in johnny_five (RubyGems)
14 compromised versions
- Jul 28, 2024
Malicious code in melio-platform-api-client (RubyGems)
9 compromised versions
- Jul 27, 2024
Malicious code in prnigtest (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in wurl-aws-s3 (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in workarea-gift-cards (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in wordify-stuckiest (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in vagrant_hvinfo (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in vacuole (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in twitter_vine (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in twitter-cards (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in telegram_bot-types (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in telegram_bot-ruby (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in telegram-notifications (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in telegram-meetup_bot (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in telegram-bot_ruby (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in telegram-bot_middleware (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in telegram-bot_api (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in taxjar-bundler (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in stuck-it_up (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in spider_src (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in spider_node (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in spider_gazelle (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in spider-monkey (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in spider-html (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in spider-bot (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in speed-spider (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in shopify-oor (RubyGems)
7 compromised versions
- Jun 25, 2024
Malicious code in selenium-spider (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in seeing-is_believing (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in secondhand_spider (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in rubylove-playing-cards (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in ruby-playing_cards (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in ruboty_telegram (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in rspec-candy (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in royal-mail_scraper (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in royal-mail_api (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in rollbar-blanket (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in resque-stuck_queue (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in referral-candy (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in rbi-central (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in rate-beer (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in rails_test-serving (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in rack_envinspector (RubyGems)
1 compromised version
Page 55 of 71