Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,893 total in gem · sorted newest first- Jul 18, 2026
Malicious code in activestorage-redundancy (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in acts-as_liked (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activerecord_locking-symbolic (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in acts-as_explorable (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in acts-as_journalized (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activemodel_validators (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activerecord_databasevalidations (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activerecord-msgpack-serializer (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activerecord_publishable (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activerecord_like (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activerecord_duplicate (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activemodel-email-address_validator (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in acts-as_splittable (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in acts-as_multilingual (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activerecord-forbid-implicit_connection_checkout (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in acts-as_publishable (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activemodel-ipaddr-validator (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activerecord_db-tools (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in acts-as_publicable (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activerecord-suppress-range_error (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in acts-as_localized (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activemodel-immutable-validator (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in acts-as_list_with_sti_support (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in acts-as_keywordable (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activerecord-rescue-from_duplicate (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activerecord-serialize-coders (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activerecord_implicit-order (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in acts-as_read_only_i18n_localised (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-record_inline_schema (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-press (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-validation (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-validator (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-record_stats (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-replica (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-model_serializers_binary (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-model_serializers_pg (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-pubsub (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-publisher (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-subset_validator (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-record_serialize_json (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-search (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in ActiveAdmin_Globalize3-inputs (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-model_serializers_validator (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activeadmin_logs (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-subset-validator (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activemerchant_clickandbuy (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activemodel-base64-validator (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-model_serializers_matchers (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-model_type_validator (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-record_fix_integer_limit (RubyGems)
1 compromised version
Page 84 of 158