Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Jul 18, 2026
Malicious code in newswandrawprint1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in newswandweekjan3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in newswandweekjan1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in newssearchwand1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaibo396866 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaicx4433606 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaibx7324267 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaidx1337585 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaidx1466937 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in newswandprint1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in newsproxytestmine1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in oaibootz9218 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in mt8402zmle (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-trusttiers-trusttier (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in mytemptest1778551000 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in newhacksvn1778556129 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in moving-average (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in mvv0 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in mvnd (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in mt8403sufu (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in newrubylogger (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-support-helphub (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in naveengem (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in mvv6 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-webhooksubscriptions-subscriptions (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in mvv4 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in mt8320mzji (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in mritestproxy123 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in newswandagenda1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in newhackhg1778556006 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in mt8178xfnt (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in movie-spider (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in monolith-twirp-webhooks-core (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in mytestproxyabc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in mvv7 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in mt8249wcnx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in naveen4gem (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in murmuring-spider (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in mvv5 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in newslambcaljan6 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in movingsign-api (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in mvv1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in mvv10 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in moving-images (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in mvv12 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in mvv11 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in moving-words (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in multi-movingsign (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in mt8405aopw (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in mvv8 (RubyGems)
1 compromised version
Page 58 of 158