Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,893 total in gem · sorted newest first- Jul 18, 2026
Malicious code in advisory_db_toolkit (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in address-validate (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in administrate_field-mobility (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in advisors-command_client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in admiral-stats_parser (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aem_deploy (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in adb_sdklib (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in agentoaitestabc123 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in agfosssacre22 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in agnostic_duplicate (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in agfosscab20 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in agfossgrant23 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in administrate_field-password (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in adn_cli (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in adapter_sqlite3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in adyen_ruby-api-library (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in address-validator (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in addons_client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in adtech_api-client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ae-validates-timeliness (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in adequate-serializer (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in age-validator (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in after-the_deadline (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in airbrake-proxy (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in administrate_field-paperclip (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in agfosslic24 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in agave_client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aicalojdhdxoa (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in agfossstd21 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in aicalunosquaz (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in admob-site_stats (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in addy-caddy_client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activerecord_jdbcsplice-adapter (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activerecord-strict_validations (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activerecord-json_validator (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in acts-as_crafter (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activerecord_postgresql-expression (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in adapter_elasticsearch (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in acts-as_likeable (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in acts-as_fuzzy_search (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activerecord-database-validations (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activemodel-url-validator (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in acts-as_subscribable (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in acts-as_commentable_with_replies (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in acts-as_better_tree (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activerecord-safe-initialize (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activerecord-globalize (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activerecord-pluck-in_batches (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activerecord_denormalize (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ad-search (RubyGems)
1 compromised version
Page 83 of 158