Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,893 total in gem · sorted newest first- Jul 18, 2026
Malicious code in bottestjanmid39d53 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in bin-search (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in beta-invites (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in blinkman-twitter-search (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in br3e6a6270eb (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in blackbird-client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in botwindscrape9d53 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in blackbird-analysis (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in botwoutput9d53 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in bottestjanmid29d53 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in binary-search_frequency (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in bosh-lastpass_plugin (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in blade-sauce-labs_plugin (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in branch-raker (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in blinkist_airbrake-scrubber (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in bosh_plugin-generator (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in bosh-cli_plugin_consul (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in bunto_press (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in bulldoggy_filesystem (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in bunto-test_plugin_malicious (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in beta_pod (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in blacklight-advanced_search (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in bottestjanmid09d53 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in bisearch-enzim_hu (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in bridgeaaa (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in cafepress-api (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in bridgebbb (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in brightbox_boxgrinder-plugins (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in beerdb-api (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in beta-tools (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in bunto-test_plugin (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in bottestjanmid19d53 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in binary-search_tree (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in brakeman-translate_checkstyle_format (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in bosh-cli_plugin_redis (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in benchmark_plot (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in bosh_plugin-pipeline (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in biblesearch_api (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aws_s3-deploy (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in batali_wedge (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in batch_rails (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in batch-translations (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aws_codedeploy-agent (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in barometer-weather-bug (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in bedrock_capistrano-uploads (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in beer-in_the_evening (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aws-cloud_search (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in bard_rake (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in batch_rails2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in backstop_deploys (RubyGems)
1 compromised version
Page 76 of 158