Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Jul 18, 2026
Malicious code in lbmtq11x (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbrssudgaaoay (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbrssuuxosyfo (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbmtq3x (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbeng658 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbrsseyuqeyzf (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbjjpuyqqs (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbfajkdltu (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbrssebmlsaht (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbqtcccksw (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbcalxcnrlgidi (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lamnew07 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lamnew08 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbcalxdsciamuf (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbcalxagpsupya (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbcaltestgyeryc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbcaltestlredrf (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbcaltestljjirx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lang-cards (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lamroot4 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lat2cal1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lamws5 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbcalxhayqouyj (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lamnew09 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lamnew05 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbcaltestawsqsb (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lamnew06 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbcaltestyoeaua (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lamnew10 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lamnew04 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lamnew03 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbcaltestcczorx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbcaltestrlmcpe (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbcaltestmvxcve (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbcaltestcwukld (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbcaltestipnern (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lbcaltestywvidk (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lamnew02 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in language-mixer (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lamtrigger71 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lamhgip123959 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lambx9652772 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lamcounproxyabc001 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lambx4123082 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lammcal6 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lamk03 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lammcal4 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lamk01 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lammeet01 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lamhg57714 (RubyGems)
1 compromised version
Page 64 of 158