Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
7,885 total in gem · sorted newest first- Sep 22, 2026
Malicious code in bumsdler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumrler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumrdler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumoler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumodler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumndler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bummdler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumldler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumlder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumiler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumidler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumfler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumeler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumedler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumduer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdsler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdrler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdper (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdoler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdoer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdnler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlwr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlur (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlsr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlser (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlrr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlrer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlre (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlor (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdloer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlner (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdller (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlir (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlier (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdleu (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlet (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlesr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlers (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlerr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlero (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlern (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlerl (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdleri (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlere (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlera (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdler-ruby (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bumdler-rb (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bumdler-lib (RubyGems)
1 compromised version
Page 9 of 158