Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,137 total in gem · sorted newest first- Jul 18, 2026
Malicious code in zwday26 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwcalx11 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwkact5 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwkopt11 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwkact4 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwcalx5 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwcalx7 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwcalx2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwknum6 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwknum1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwcalx4 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwkact2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwknum2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwkopt16 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwcalx8 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwknum5 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwkopt14 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwkact8 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwkopt15 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwkact6 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwknum7 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwcalx10 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwkopt2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwkopt17 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwcalx6 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwcalx12 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwkopt18 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwkopt10 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwcalx13 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwknum4 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwknum3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwkopt13 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwan_cal_jan1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwagback2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwcalx0 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwan_cal_jana (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zw_nobdr_events (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwagback (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwag26 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zw_nobdr_day3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwagweek (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zw_nobdr_week (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zw_nobdr_events2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zw_nobdr_day (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwcalx1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zw_nobdr_day2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwagq (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zw_downloadops (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwagfrag (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in zwagbdr (RubyGems)
1 compromised version
Page 6 of 143