Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,893 total in gem · sorted newest first- Jul 18, 2026
Malicious code in dlxprobe1 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in cucumber-rake_runner (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dependency-graph-platform-proto (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dlxprobe16 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in cucumber_json_schema (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in daslambcal71 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in datadog-proxy (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dlpdf1734881 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in diff-analysis (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dlxprobe11 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in daswand102661 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in custom-logs (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dlxprobe10 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dlxprobe14 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in daswandcal71 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dlxlast (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in deriving-license (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in danger-ios-logs (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dlpdf1734901 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dasswcal71 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in danger_apkstats (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dependency_confusion123 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in delorean_client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dark-sky_weather (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in current-weather (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in delayed_plugins-airbrake (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in danger_brakeman (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in cytokine (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dlxprobe12 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dextester (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in designtestproxyxyzabc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in datadog-apm (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in daslam173851 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dependency-snapshots-api-proto (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in datadog_notifications (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dlxprobe13 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in dlxprobe15 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in cwlogs_s3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in datadog_cli (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in civic-test-scrape-out (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in codon (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chmid8600x585361 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chmid8800x585568 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in commission-junction_stats (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chmid6000x582552 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in commandsy_plugin (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chmid8000x584612 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chmid8300x612010 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in cocoapods_fixbugs-plugin (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chmid8340x619659 (RubyGems)
1 compromised version
Page 73 of 158