Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
255,906 total · sorted newest first- Jul 7, 2026
Malicious code in sprox-c160-1mod (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sprox-c160-1hg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sprox-c160-1git (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sprox-c160-1fossil (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sprox-c160-1bzr (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sprox-c160-0svn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sprox-c160-0mod (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sprox-c160-0hg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sprox-c160-0git (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sprox-c160-0fossil (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sprox-c160-0bzr (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sprobesvnz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sprobehgz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sprobefossilz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sprobebzrz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southwarkssrfhack5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southwarkssrfhack4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southwarkssrfhack3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southwarkssrfhack2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southwarkssrfhack (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southwarkproxyabcabc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southwarkhack1778555109 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southwark-test-f8e1778549558 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southrobots (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southregtestabc (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in southproxytestabc (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in southproxysvn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southproxyhg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southproxyfossil (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southproxybzr (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southproxy2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southprox1778549640 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southprobe55a1778551356 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southprobe1778555189 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southnews-test-35329 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southmodinj1778552871 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southmeet8405 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southmeet8403 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southmeet8402 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southmeet8320 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southmeet8249 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southmeet8178 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southip1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southinjectabc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southhgjina245 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southhacks47761 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southgoinj1778551435 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southfossj356 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southextractproxy2026 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in southdot (RubyGems)
1 compromised version
Page 48 of 5,119