Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,893 total in gem · sorted newest first- Jul 18, 2026
Malicious code in aliyun_mts (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ama-validators (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in alias-scope (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aliyun_rds (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in allocation-stats (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aliyun_slb (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in alipay-dualfun (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aliyun-live (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aliseeks-api (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in alerty-plugin-datadog-event (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aizwhvgtkghn (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aker-cas-cli (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in alchemy-pg-search (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aizporoccrvn (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in alephant_publisher-queue (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aizzofpvqxbu (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aiwsynezxalw (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aiwsqvuxobcb (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aiwrfyltgujs (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ali-mns (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aiwsamimxhff (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in algolia-places (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in alacrity-client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in alerty_plugin-slack (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in alerty_plugin-mail (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aizkfewpqkax (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aiwsqjjbeqyn (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in alephant_publisher-request (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ali-dayu (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aiwuzbgljyfk (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aizgpanecvku (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aiwvntrvdltc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in alerty-plugin-amazon-sns (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in alexa-plugin_generator (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aiwsjuzltawo (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in alias-class (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in alephant_publisher (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aizjmmmwsreb (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ajax-submit_rails (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aiztuyancttc (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aiwuanpmjkub (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aiwrhogwqhox (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in alephant_logger-statsd (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in alerty_plugin-ikachan (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aiwqongzivyd (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aiznuarbhczr (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in alerty_plugin-datadog-event (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in alcatraz_client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in airbrake_graylog2 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aitdaludfnfq (RubyGems)
1 compromised version
Page 81 of 158