Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,893 total in gem · sorted newest first- Jul 18, 2026
Malicious code in a15745105-ichinokii (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in a15745105-ichinoki (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in a15z8my-name (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in a1426kt-prime_number (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in a-special_day (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in a1447ll-hpbd (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in 37_pieces-of-flair (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in 3scale-time_range (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in a00_arcguide (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in 3months-staff-schedule (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in a-stupid-test_gem (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in a0a_arcgraph (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in a1439ty-bmiV3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in a1426kt-prime-number (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in 99designs_tasks (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in 3scale-client (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in a1447ll-test (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in a14z6ch-elapsed_days (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in a1409yo-health (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in a14z6ch-elapsed-days (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in a-stupid_test_gem (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in a1408nw-Ounennhei (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in a1436mm-age (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in 1-as_identity_function (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in a1412tk-bmi (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in a-special-day (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in 3months-staff_schedule (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in a1420ks-bmi (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in a1437ky-bmi3 (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in a1447ll-mini_test (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in 1-as-identity_function (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in 3scale-time-range (RubyGems)
1 compromised version
- Jul 18, 2026
Malicious code in a1330ks-bmi (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zzzltestfoobarxyz (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in zzwmgweb02 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zzwandtemp1778552518 (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in zzwandsxabc119 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zztxtwtmp14 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zztxtwtmp13 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zztxtwtmp12 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zztxtwtmp11 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zztxtwtmp10 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zztxtwtmp09 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zztxtwtmp08 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zztxtwtmp07 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zztxtwtmp06 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zztxtwtmp05 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zztxtwtmp04 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zztxtwtmp03 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zztxtwtmp02 (RubyGems)
1 compromised version
Page 88 of 158