Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,893 total in gem · sorted newest first- Jul 18, 2026
Malicious code in ar_octopus-replication-tracking (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in apptuit_fluent-plugin (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aqueduct-client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in approval_ratings-cli-app (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in application-seeds (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in apple-class_client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in arabic-normalizer (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ar-lightning (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in applogger_ruby (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in applicious-utils (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in apple_news-client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in application-digester (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in apress_api (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ar-database_duplicator (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in application-insights (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aptly-cli (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in application-config (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in apple-dep_client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ar_find-in-batches-with-order (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in application-module (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in apress_documentation (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in applicant-tracking_api (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ar_serialize-helpers (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aptible_cli (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in apress_validators (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ar-json_serialize (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in apress_moysklad (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in applicaster_logger (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ar-publish_control (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in apress_changelogger (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in applidget_oauth2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in apod_cli (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in amoeba-deploy_tools (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in api-geo_client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in apiotics-aws_client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in apiotics-aws_iot_client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in android-string_resources_validator (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in appium-doc_lint (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in amplitude_api (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in apigee-cli (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in apache-felix_webconsole_client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in amplifypay-ruby (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in angular_file-upload-rails (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in angular_turbolinks (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in apache-felix_api_client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in android_command-line-tools (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in appium-lib (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in apitool_client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in apibanca_client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in appfigures-client (RubyGems)
1 compromised version
Page 79 of 158