Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Sep 22, 2026
Malicious code in bundlof (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundloer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundloef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlner (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlnef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundller (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundllef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlir (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlif (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlier (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlief (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlfe (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlf (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlev (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundleu (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlet (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlesr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlesf (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlers (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlerr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlero (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlern (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlerl (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundleri (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlerf (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlere (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlera (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundler-ruby (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bundler-rb (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bundler-lib (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bundleor (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundleof (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundleo (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlenr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlenf (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlelr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlelf (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundleir (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundleif (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlei (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundleg (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlefs (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlefr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlefo (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlefn (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlefl (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlefi (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundleff (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlefe (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlefa (RubyGems)
2 compromised versions
Page 7 of 158