Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,893 total in gem · sorted newest first- Jul 18, 2026
Malicious code in ansible-tower_client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in apns-polite (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in anything_slider (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in angel-list (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in app_cli (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in android_publisher (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in app_deployer (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in api-deploy (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in any_validate (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in answers_ruby-client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in api-client_builder (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in android-lint_translate_checkstyle_format (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in amazon_kinesis-client-ruby (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in apache-sling_api_client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in anything-slider_rails (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in apocalypse_client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in angular-form_validation (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in apn-client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in apidone_client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ant31_logstash-filter-kubernetes (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in api-batch (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in allscripts-unity_client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in alphabet_rocker (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aliyun_mq-sdk (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aliyun_odps (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in alias-metrics (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in also-validates (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aliyun-ruby_api (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aliyun-sls (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in alias-helper (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in alipay-escrow (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in alive-state (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in alidayu-api (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aliyun-open-search (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in allq-client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aliyun_sdk-core (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in alipay-global (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aliyun-mns (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in alphabetical-paginate (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in alias-to_method (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in amazon_search (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aligned-table (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in alphabetic-paginate (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in alphabetical-paginate_uk (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aliyun-open_search (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in align_rest_api (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aliyun_push (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aliyun_mqs (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aliyun-sls_sdk (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in alidns_ruby (RubyGems)
1 compromised version
Page 80 of 158