Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
255,906 total · sorted newest first- Jul 7, 2026
Malicious code in tryd4zz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in tryd3zz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in tryd2zz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in tryd1zz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in tryd0zz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in tryc4xzz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in tryc4tzz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in tryc4bzz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in tryb4zz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in tryb3zz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in tryb2zz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in tryb1zz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in tryb0zz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in trya5zz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in trya4zz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in trya3zz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in trya2zz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in trya1zz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in tmpxyz984024x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in tmptestsfvagomq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in tmpojrljqbwjgabc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in tmpgemx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in tmpgemtestwands12345abc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in tmpgemikotzwpgd (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in tmpfjbgghjfcigl (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in tmp-meta-testabc123 (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in tinytestbkpsfsnykc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testwandyg3hook (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testtmp993 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testssp-wukues (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testslnews795 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testqwertyabcabc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testproxyxx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testproxywands (RubyGems)
3 compromised versions
- Jul 7, 2026
Malicious code in testproxy3662 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testprox52736 (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in testparamhg7 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testparamhg6 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testoai4182477 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testlbabcxyz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testlamb987 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testhgabc42 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testgemoux174130 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testgemhack1778550021 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testgemfooabc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testfragabc556 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testfragabc555 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testfoo_proxy2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testfoo_proxy (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in testexproxyabc555 (RubyGems)
1 compromised version
Page 45 of 5,119