Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,893 total in gem · sorted newest first- Jul 18, 2026
Malicious code in hrab4 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hgwenc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hrab3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in icare (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hraq3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hgrangex9 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hgwcal2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hwc2v (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in jenkins-statsd (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in html_scrubber (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in jekyll-rp-logs (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in kevins-propietary_brain (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hraq1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in irs_data (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in icaret (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hgrangex7 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hraq0 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hwc3v (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hgpathr2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in gopxy (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in gitstats_ruby (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hgpathr6 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in gitstats_rb (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hacksvn1778554764 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hgrangex2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in haybales (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hackhg1778554737 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in has-changelogs (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in goimportinjmeta1778551143 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in has-logs (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in gtest1778553451 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hackbzr1778554791 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hgrangex1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hfc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in govvan9000966 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hgpathr1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hgprobe20548 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hgpathr3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in gozzz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in github_release-stats (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in google-apis-androidpublisher_v2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hello-kelvinst (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hackfossil1778554817 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hgprobe26718 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in grax0 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in gtest1778553445 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in gitlab-orchestrator (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in goproxylondonx (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hgprobe16819 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hackgit1778554705 (RubyGems)
1 compromised version
Page 68 of 158