Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Jul 18, 2026
Malicious code in lf295s0 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lf295q1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lita_onewheel-beer-baileys (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lcomp (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lf295q6 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lf295hgj (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lita_onewheel-beer-abvpub (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lita_onewheel-beer-base (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lghookprobeabc1778552328 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lczbvghwyxk (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in linkpxstat (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in liquid-renderer (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lf295hgd (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lckxcksgmwc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lf295q8 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lev173958552 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lf295q11 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lines-mixer (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lev174748566 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lf295q12 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lev174658556 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lf295q0 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lf295s1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lf295q5 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lev174518561 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lf295s3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lf295q4 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lf295q2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lf295s4 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lf295s2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lcrzsrkysea (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lita_onewheel-beer-craftpourhouse (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lf295q9 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lev173858547 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lf295q3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lf295r1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lf295hgj2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lf295r2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lf295q10 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lf295r0 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lf295q13 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lf295q7 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lf295q14 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbyvpipwpi (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbrsszxanirvk (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lcalx0968259 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lcalx1468283 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lcalx1268273 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbwmttmkfk (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lcalx1368278 (RubyGems)
1 compromised version
Page 62 of 158