Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,893 total in gem · sorted newest first- Jul 18, 2026
Malicious code in dot-rake_tasks_in_rails (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dwpdf1248771 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dwpdf1248841 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dlxprobe23 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dlxprobe6 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dlxprobe2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in doctolib (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dog-biscuits (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dwpdf1248751 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dwpdf1248851 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dogapi_demo (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ebay-enterprise_affiliate_network (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dradis_brakeman (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dlxprobe4 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in driftwood-client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dlxprobe5 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dlxprobe21 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ebay-client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dwpdf1248881 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in docfetchxyz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ebay-trading (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ebay_ysr (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in doge-linguist (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dlxprobe19 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dradis_nmap (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in doge-helper (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dlxprobe17 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dlxprobe3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dlxprobe20 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dlxprobe8 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in docdesignproxy4647 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dlxprobe9 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in doge_chef-formatter (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in edmunds-vin (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dradis_ntospider (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dt_rake (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dragonfly_activerecord (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dragonfly_cloudinary-datastore (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dlxprobe7 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dragonfly_cloudinary (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dlxprobe22 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in devino-sms (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dlxprobe0 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in damn_weather (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dassw82491 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in curly-lib (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in diet_earthsmoke (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in designtestabc01 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in divining-rod (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in davtestproxyxyz123 (RubyGems)
1 compromised version
Page 72 of 158