Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
255,906 total · sorted newest first- Jul 7, 2026
Malicious code in testexfragabc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in testabcabc2248gem (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in tbxtestaquz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sz638fce (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in symod1778552601 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sygit1778552745 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sx638fce (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swwsdl2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swwsdl1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swsubrep7a (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swsubrep6a (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swsubrep5a (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swpdf131119fos (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swpdf1311191 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swpdf1311181 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swpdf130990fos (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swpdf130988fos (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swpdf130985fos (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swpdf130981fos (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swpdf130962fos (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swpdf130955fos (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swmtry (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swmodsjabc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swmeet02 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swmeet01 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swm8405 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swlicsuba (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swlicrep8a (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swlicrep7a (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swlicrep6a (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swlicdoca (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swlicap7a (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swkefepbkjgqj (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swi6133 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swgitssabc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swd8405t (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swd8405 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swd8402 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swd8249t (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swd8249a (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swcossjabc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swcossfabc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swcaltesta (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swcalcelf (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swcalcalh (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swcalcalg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swcalcald (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swcalcalc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swcalcalb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in swcalcala (RubyGems)
1 compromised version
Page 46 of 5,119