Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Jul 18, 2026
Malicious code in meet8405a (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in m8402v1gfq (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in mandrill-api-ruby (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in m8405v2llz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in meet8402a (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in meet8178a (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in m8402v3uig (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in m8320v1gep (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in maventa_common (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in m8403v1zxu (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in macklemore (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in m8405v5lmc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in m8402v2ggi (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in m8403v2tew (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ltestprobe (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in md_confluence (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in m8320v5tkv (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in m8405v3bjn (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lpdfbudap8682 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in message_gateway (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ltax438 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in mars-rover_alvin (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in m8249v3xib (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in maventa_utils (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in m8403v5qvm (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lpp19932 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in metatestabcxyz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in meet8249a (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in m8249v2jsh (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in m8403v0lws (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in m8405v0nhw (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lp490x (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in m8405v4bpo (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lpp09927 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lp489x (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in m8320v2umh (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in m8249v4lvd (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in m8320v3rwa (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in m8402v5qwf (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in m8403v3qkt (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in m8320v0utd (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in m8249v0oem (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in m8249v5qnb (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in m8320v4scj (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lpp29938 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in m8402v4rgs (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in m8403v4kng (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lp490 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in luno-cocoapods (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in m8249v1gsl (RubyGems)
1 compromised version
Page 60 of 158