Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
255,906 total · sorted newest first- Jul 7, 2026
Malicious code in wcalamp (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wcal (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wbotsvn999 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wbotmwoy27a3 (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in wbothg999 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wbotfossil999 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wbotbzr999 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in watpdf885 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in watpdf884 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in watpdf877 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in watestabc129 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in watestabc128 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in watestabc127 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in watestabc126 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in watestabc125 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in watestabc124 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in watestabc123 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wanqproxy (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wanproxyq (RubyGems)
5 compromised versions
- Jul 7, 2026
Malicious code in wanproxy2 (RubyGems)
11 compromised versions
- Jul 7, 2026
Malicious code in wandsyardresabc2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandsyardresabc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandsworthproxyx1778552356 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandsworthproxyabcabc (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in wandsworthprobe1778551714 (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in wandsvnx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandsvnroot (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandstest-c217d0 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandsslurp (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandssecretds1778555089 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandsquerygitone (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandsquery1778555224302 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandsquery1778555219567 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandsquery1778555214826 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandsquery1778555209534 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandsquery1778555184810 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandsproxtest1778549815 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandsmod1778555488 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandshack9 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandshack8 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandshack7 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandshack6 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandshack5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandshack4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandshack3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandshack2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandshack1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandshack0 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandsdock7wre22svn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in wandsdock7wre22slashjan (RubyGems)
1 compromised version
Page 39 of 5,119