Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,893 total in gem · sorted newest first- Jul 18, 2026
Malicious code in codestats_metrics-reporter (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in crl-watchdog (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in cocoapods_icemobile-plugin (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chmid9500x539919 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chmid8200x584843 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chmid8310x612257 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in civichookfake (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chmid8000x530358 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in console_auth (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chmid8330x616863 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in civic-test-scrape (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chmid7500x584348 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chmid8400x585075 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in critter (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chmid7000x527141 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chmid9000x537373 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in contributors-stats (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in cinch_logsearch (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in cloud-search (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in comic-vine (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in cuatest889 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chmid8320x613915 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chmid8500x532747 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in cocoapod (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chmid7000x584110 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in cinch_weatherman (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in city-search (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chmid7500x528543 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chmid5000x580964 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chmid6500x525265 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in cordova_rake (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chmid10000x542027 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in commonmarker_pluggable (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in claide_plugins (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in councilfetchxqz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chalk-consul (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chatterbox-client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chalk-thrift (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chatoaifetch177855390730 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chatoaifetch177855296778 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chalk-henson (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chatoaifetch177855388228 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chatoaifetch177855557914 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chatoaifetch177855288717 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chatoaifetch177855382980 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chatoaifetch177855598147 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chatoaifetch177855300091 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chatoaitesthg1778552644 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chalk-service (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chmid4000x579098 (RubyGems)
1 compromised version
Page 74 of 158