Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,893 total in gem · sorted newest first- Jul 18, 2026
Malicious code in hgprobe23760 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in gtest1778553427 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in gitlab-glfm-markdown (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hgprobe28069 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hackysouthfetch (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hack-cards (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hgpathr5 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in goimportinj1778550957 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in haefgerasgrae (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hgrangex3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hgpathr4 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in halo-stats (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in grpdf1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in grpdf0 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in gtest1778553438 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in gtest1778553433 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in hgrangex4 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in gemx559383abc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in g8405fcjbu (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in gemnasium-gitlab-service (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in g8320gdqxq (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in get-stats (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in gamer-stats (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in github_chatops_extensions (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in g8402gqdyg (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in g8249bfavd (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in gemxpush21778549590 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in gimme-vins (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in gexpfetchxyz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in github_org-stats (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in freshworks-ruby (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in generate-object-property (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in foot-stats (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in github-proto-repositories (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in github-kredz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in fosscallamb (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in fosscw3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in gemxy-1778522681 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in github-kv (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in github-orca (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in geomtrya59d9lxrr9 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in fosscw2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in font_league (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in g8249sspor (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in g8320fiwiw (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in g8405bkrzi (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in g8320sywkw (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in g8249fmvyt (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in galvinhsiu-active-cart (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in fooaid503724d (RubyGems)
1 compromised version
Page 69 of 158