Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,893 total in gem · sorted newest first- Jul 18, 2026
Malicious code in g8402sunic (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in g8405gtkwy (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in g8249gqrzu (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in git-team_stats (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in game-shuffle_cards (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in g8402bcjvb (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in g8320bmoos (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in g8402fazkc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in g8405sfwon (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in fosscalwands (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in fluent-plugin-enhance-k8s-metadata (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in fluent_plugin-statsd-event (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in final-shoaib (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in fluent_plugin-datadog-statsd (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in fadtestgemx1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in fluent_plugin-stats (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in fluent_plugin-statsd (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in font-assets (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in fig-rake (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in fluent_plugin-dogstatsd-mediba (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in font_awesome-sass (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ffxnzzez0bc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in fluent_plugin-cloudwatch-logs-foxtrot9 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in fluent_plugin-airbrake-python (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in feature-flags-client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in fluent_plugin-dogstatsd (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in fluent_plugin-statsite (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in font_fabulous (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in fortnite-api (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in fluent_plugin-cloudwatch-logs (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in fluent_plugin-stats-notifier (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in final-poc-usa (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in extfetchedwand1778556507 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in font_awesome-sassc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in font_awesome-sass-mixins (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in foo123 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in fluent_plugin-logsene (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in font_awesome-sass-c (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in first-giving_api (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in f2fe-s1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in fossa-curl-test (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in fluent-plugin-haproxy-stats (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in fluent-plugin-container-logs_filter (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in fluent_plugin-airbrake-logger (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in first-gem_rakesh (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in font_roboto-rails (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in fluent_plugin-statsd-output (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in extfetchedwand1778556472 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in foofoofooproxyxyz1778553602 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in forgiving-nil (RubyGems)
1 compromised version
Page 70 of 158