Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Jul 18, 2026
Malicious code in lchcbtgamir (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lcalx1668291 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbrssyrofhwlco (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbrssyeazdratp (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lcalx0368230 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lcalx1568287 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lcalx0668245 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbrssysrtydeaa (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbrssyacvbhfoz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lcalx1168268 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbyliylvym (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbrssypnbowmaf (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lcalx0568239 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lcalx1068264 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lcalx0168219 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lcalx0868254 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lcalprobe (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbtyldorgi (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lcalx0068214 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lcalx0268224 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lcayyxytfuc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbrssyjzqfxbul (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lcalx0768249 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lcalx0468234 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbsbhdwfrr (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbrssyjsxxubbr (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbifxeuorg (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbmtq1x (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbmtq10x (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbmztrpfjb (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbrssbhrlysso (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbrssmmqrwkvm (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbmtq2x (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbrssvvqzexsn (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbcalxhogwjdqe (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbmtq0x (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbcalxjlnzfios (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbmtq9x (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbmtq6x (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbrssftspjbqe (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbhnlsxtbs (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbrssltutuvwp (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbmtq8x (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbmtq7x (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lboaktdmwa (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbcalxeyndhbdj (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lblzhhumah (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbmtq5x (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbcalxsdgrprjs (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbmtq4x (RubyGems)
1 compromised version
Page 63 of 158