Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,893 total in gem · sorted newest first- Jul 18, 2026
Malicious code in lambcal434a2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lambehgnew1593 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lambfetch001 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in knot-date-utils-rb (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in johnny_five (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lambehgrobe26250 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lai67123812 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lambfetch003 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lambethscraper1778555936 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lambethscraper1778549610 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in knot-devise-jwt-helper (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in knot-rails-assets-pipeline (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lambfetch002 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lambehgnewhttp31593 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in keytest943 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lambethssrfhack (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lambegitx4062 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in lambethssrfcal (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in kaleido (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hwc5v (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in htmlmetaproxyzz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hwc8v (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hwc1v (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hgrangex6 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hockeystick (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in jdbc-zzz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hwc0v (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hrab0 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in injecthack1778550335 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in http-statsd (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in indonesian-province (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hola_rreichel3github (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in investing_parameters (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hwc6v (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in injectwanfoo (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hwc7v (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hrab2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in idleprobezz001177 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hwc4v (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hraq2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hgrangex5 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in i18n_sonder (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in jmcnevin-rghost-barcode (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in jaconda-telegram (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in kevin-thompson (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hgwcal1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hide-asset_logs (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hgrangex8 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hraq4 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hrab1 (RubyGems)
1 compromised version
Page 67 of 158