Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,893 total in gem · sorted newest first- Jul 18, 2026
Malicious code in active-support_alias_class_method (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activemerchant-banklink (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-record_lite (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-public_resources (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-model_validates_intersection_of (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activemodel-can-validator (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-model_version_serializers (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-serializer (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-redis_stats (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activemodel-behavior-validator (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-scaffold_batch_vho (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activeadmin-searchable-select (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-record_samplooper (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-scaffold_config_list_vho (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-tools (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active_profiling (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activeadmin-jfu_upload (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-model_serializers_cancancan (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-model_validators_ex (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-replicas (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activeadmin_mongoid-localize (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activemerchant_payline (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in activeadmin-globalize_inputs (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active_model-email-validator (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-rest_client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-comparison_validator (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-hash-like (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in action-parameter (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in actionview-link-to_blank (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in act-as_nameable (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-admin_import (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in actionview-link-to_block (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-model_serializers-jsonapi_embedded_records_deserializer (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in action-meta_tags (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-delivery (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-model_serializer_plus (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in act-blue_reporter (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-model-permalink (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-model-better_errors (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-merchant_mollie (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-model_policy (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-admin_globalize3_locale_selector (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in actioncontroller-parameter-filter (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in action-component (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-link_to (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in actions-run-service (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-admin_theme (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in active-model-password (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in act-as_time_as_boolean (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in act-as_serializable (RubyGems)
1 compromised version
Page 85 of 158