Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Jul 18, 2026
Malicious code in oaigx4634836 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaifx4260376 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaifx9677940 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaiex0014506 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaifx7129963 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaifetchmde1778385544 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaifx2401408 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in newslambprint1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in nwcid324 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaicx6062340 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in newslambcaljan5 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in newswandcommittees1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaidx1169327 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in newswanddochome1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaicx2721076 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in nwcid319 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaibootx8192 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in nwcid323 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaibx1202338 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaidx3879209 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in newswandweekjan4 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in newslambprint2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in nwcid321 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in nwcid318 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in newlogger (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaicx8859010 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in nwcid311 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in newswandcaljan2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaidx1469215 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in newswandweekjan5 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaicx3769699 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaibx4676369 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in newswandrawprint2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaidx6135652 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaibo825590 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in newswandprint2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaidx3492001 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaibooty9217 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in nwcid320 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaicx3857133 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in nwcid322 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaibx0092307 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in newswandweekjan2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaidx3409275 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in nwcid315 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in nhtsa-vin (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in nwcid316 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaidx0276239 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in newswandcaljan1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaibo048288 (RubyGems)
1 compromised version
Page 57 of 158