Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
3,510 total in gem · sorted newest first- Jul 7, 2026
Malicious code in zjinas1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjina1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjimg80 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjiatxt1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjiasearch2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjiasearch1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjiarange2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjiamd3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjia23 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjia22 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjia21 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjhash80 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjgview5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjfull3351 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjfull27888 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjfull1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjfadgip (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjencp2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjence3a183 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjencba0ca4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjenca01b83 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjenc82c4d3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjenc31c8c8 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjdocs1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zjapiq55 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zicsw131095 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zicss110901 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zhgxf1f55d (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zhgx02ab9f (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zhgjin3740c2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zhcalf4ed55 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zhcald5e4c6 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zhcal8772a2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zhcal57252b (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zhcal0b8005 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zgity13895 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zgitjina64499a (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zgitjina55da35 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zgitcalb4d65a (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zfetchrdio11lk0i (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zexcoknh41ysf13 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zexc4tj8o7ubol (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zbzrx48e5bd (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zbzrjincf11b0 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zaqqfqzojwzv (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in zakoyavnjezx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in ylam41778568568 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in ylam31778568568 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in ylam21778568568 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in ylam11778568568 (RubyGems)
1 compromised version
Page 9 of 71