Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,893 total in gem · sorted newest first- Jul 18, 2026
Malicious code in chalk-sentry (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chatoaifetch177855308016 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chatoaifetch177855306194 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chalk-interface (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chef-partial-search (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chalk-hostname (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chef_cloudsearch (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chmid6000x524101 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chatoaifetch177855509941 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chef_handler-datadog-demo (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chatoaitestbzr1778552654 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chatgptproxytmp (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chatoaifetch177855303836 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chatoaitestsvn1778552651 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chatoaifetch177855329769 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chatoaitestgit1778552630 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chalk_rake (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chatoaifetch177855393242 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chef_handler-statsd (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chatoaitestfossil1778552663 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in capistrano_stats (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in capistrano_rails-logs-tail (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in capistrano_telegram-notification (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in capistrano-telegram-notification (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in capistrano_runit-rake (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in capistrano_rake (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in capistrano-scm-git-with_submodule_and_resolv_symlinks (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in capistrano_airbrake (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in candy_-sql (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in candy-check (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in capistrano3_drupal (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in cap_drupal-multisite (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in cache-stats (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in campaign-monitor_subscriber (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in cat_dog (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in capistrano_auth-subscriber (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in capistrano_logs (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in cards-lib (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in capistrano_scm-gitsubmodules (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in capistrano_telegram (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in caljanzzjcq (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chalk-cli (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ceedling_autorake (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in catarse-paypal_express (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in capistrano_copy-subdir (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in chalk-aws (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in capistrano_rails-subdir (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in bitmovin_api (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in c00_arcguide (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in bvr-api (RubyGems)
1 compromised version
Page 75 of 158