Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Jul 7, 2026
Malicious code in zlfr32573 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlfr29814 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlfr29726 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlfr20694 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlfr19406 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlfr18740 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlfr178 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlfr16398 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlfr13581 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlfr1135 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlday2711778553471 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlambcal1778552829 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlam_www.7369 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlam_root (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlam_newcalYY (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlam_newcalok (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlam_mode12909 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlam_meet24678 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlam_lamb13300 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlam_httpsno (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlam_httpsm (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlam_httpno (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlam_httpm (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlam_httpalt (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlam_hjanh (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlam_hjang (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlam_hjanf (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlam_hjane (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlam_hjand (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlam_hjanc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlam_hjanb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlam_hjana (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlam_demo11842 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlam_cal_jan3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlam_cal_jan2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlam_cal_jan1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlam_cal30 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlam_cal29 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlam_cal28 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlam_cal27 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zlam_agenda (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjsrch2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjpath80 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjpage50 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjpage5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjpage2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjpage100 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjpage10 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjpage1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjinside1 (RubyGems)
1 compromised version
Page 8 of 71