Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Jul 18, 2026
Malicious code in m8405v1rjo (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in m8402v0nty (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lpdfdev8687 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lita_onewheel-beer-upperlip (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in logs-tf (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lp129 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in loot993 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lp129x (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lp256 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lita_onewheel-beer-growlers (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in londontest1778549274 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in logstash_codec-cloudfront (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in logs-viewer (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lita_onewheel-beer-tin-bucket (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in logstash_codec-avro (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lp261 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lp489 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lmbp24941 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lp205 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in log4r_logstash (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in londonprobe1778550281 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lp346 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lita_onewheel-beer-pints (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lita_onewheel-beer-wayfinder (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in logstash_codec-bytes (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in localnewstesta (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in logstash_codec-cloudtrail (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in logstash-codec-avro-schema_registry (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lita_onewheel-beer-wework (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lp332 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in logging_logstash (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in living-dead (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lita_telegram (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lita_telegram-plus (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in londontestphjoxf (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in logstash-codec-bulk-es (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in londonproxytestabc1778549587 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lp125 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in loot995 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lp124 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lp205x (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lita_onewheel-beer-loyal-legion (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in logstash_codec-cef (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in logstash_2-output-rollbar (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in logs-visualizer (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lp342 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lp357 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lf295q15 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lita_onewheel-beer-btu (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lita_onewheel-beer-apex (RubyGems)
1 compromised version
Page 61 of 158