Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Sep 22, 2026
Malicious code in bundlef-ruby (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bundlef-rb (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bundlef-lib (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bundlef-gem (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bundlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundleer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundleef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlee (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundled (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlec (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlear (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundleaf (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlea (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundldr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundldf (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlar (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlaf (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlaer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlaef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundker (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundkef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundiler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundilef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundier (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundief (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundelr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundelf (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundeler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundelef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundeer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundeef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunddler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunddlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundaler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundalef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundaer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundaef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buncler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunclef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunaler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunalef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunalder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunadler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunadlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunader (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumxler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumuler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumsler (RubyGems)
2 compromised versions
Page 8 of 158