Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
255,906 total · sorted newest first- Jul 7, 2026
Malicious code in vcssvnx1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vcssvnpdfx1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vcsmodpdfx1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vcshgx1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vcshgpdfx1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vcsgitpdfx1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vcsfossilx1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vcsfossilpdfx1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vcsfetchx1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vcsbzrx1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vcsbzrpdfx1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vanityzzgbqvirfx (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in vanity2zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vand7mldo1778552612 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vand6zltd1778552597 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vand5kbjt1778552578 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vand4yiiq1778552563 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vand3flmy1778552525 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vanc5smpr1778552455 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vanc4inrp1778552437 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vanc3ubcy1778552409 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vanc2selo1778552388 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vanc1rfwf1778552366 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in vanc0ekto1778552346 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v9zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v8zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v7zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v6zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v5zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v4zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v3zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v26zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v25zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v24zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v23zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v22zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v21zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v20zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v19zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v18zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v17zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v16zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v15zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v14zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v13zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v12zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v11zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in v10zzgbqvirfx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in uxwcookie4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in uxwcookie3 (RubyGems)
1 compromised version
Page 43 of 5,119