Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Jun 25, 2024
Malicious code in capistrano-scm-git-with_submodule_and_resolv_symlinks (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in cap_drupal-multisite (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in candy_-sql (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in candy-check (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in campaign-monitor_subscriber (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in cafepress-api (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in cache-stats (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bunto_press (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bunto-test_plugin_malicious (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bunto-test_plugin (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bulldoggy_filesystem (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in brightbox_boxgrinder-plugins (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in branch-raker (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in brakeman-translate_checkstyle_format (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bosh_plugin-pipeline (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bosh_plugin-generator (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bosh-lastpass_plugin (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bosh-cli_plugin_redis (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bosh-cli_plugin_consul (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in blinkman-twitter-search (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in blinkist_airbrake-scrubber (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in blade-sauce-labs_plugin (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in blacklight-advanced_search (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bitmovin_api (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bisearch-enzim_hu (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in binary-search_tree (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in binary-search_frequency (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bin-search (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in biblesearch_api (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in beta_pod (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in beta-tools (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in beta-invites (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in benchmark_plot (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in belong_plugin-rds-pgsql-log (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in beerdb-api (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in beer-in_the_evening (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in beer-bash (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bedrock_capistrano-uploads (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bbs-uploader (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in battle_on (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in battery-growl (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in battering-ram (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batsd_dash (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batman_rails (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batched-query (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batch_rails2 (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batch_rails (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batch-translations (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batch-it (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batch-insert (RubyGems)
1 compromised version
Page 60 of 71