Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Sep 22, 2026
Malicious code in bunlddr (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunldar (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldaer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunlcer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunlaer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunlader (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunkder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buniler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunilef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunilder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunidler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunidlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunider (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunfler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunflef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buneler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunelef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunelder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunedler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunedlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buneder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunduer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunduef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundsler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundslef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundrler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundrlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundper (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundpef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundoler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundolef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundoer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundoef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundnler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundnlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlwr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlwf (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlur (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundluf (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlsr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlsf (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlser (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlsef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlrr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlrf (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlrer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlref (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlre (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlor (RubyGems)
2 compromised versions
Page 6 of 158