Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,893 total in gem · sorted newest first- Jul 18, 2026
Malicious code in auth-client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in asset-uploader (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in assets-pipeline (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in att-codekit (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in atacama-client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in attr-validator (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in asterisk_ari-client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in auto-localize (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in asset-symlink (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in assets_publisher-for-hanami (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in assets-offline (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in auto-flick (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in atlas-client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in asset-host_client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in array-xml-serialization (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in arethusa_client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in assembla-cli (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in asciidoctor_bibliography (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in asciidoctor_pdf-linewrap-ja (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in archive-lister (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in artoo_crazyflie (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in argentinian_validations (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ardm_sqlite-adapter (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in assemblyline_formatter (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ascii-press (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in arctica_autorization-rails-plugin (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in artisan_plugin (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in archivist_client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in archive-uploader (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in assemblyline_cli (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in asana_cli (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in asset-pipeline_i18n (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in assembly_client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in asset-link (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in arel-search (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in arproxy-plugin-mysql-casual_log (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in assemblyline_ruby (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in arcvalues (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ardm_validations (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aspose-slides_cloud (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in arethusa-plugin_generator (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ardm_serializer (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in asset-pipeline (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in asdf-zzzz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in area-code_validator (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in array_subindex (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in arethusa_cli (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in applied-css (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in arb-spider (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in apple-store_search (RubyGems)
1 compromised version
Page 78 of 158