Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
255,969 total · sorted newest first- Jul 7, 2026
Malicious code in slnhack1778549948 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnfive8155 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnfive8150 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnfive8145 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnfive8140 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnfive8135 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnfive8130 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnfive8125 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnfive8120 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnfabcxyz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slneabcxyz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slndtskerm (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slndeohlhb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slndabcxyz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnczcvlmn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slncwszfib (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slncvfyewd (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slncuebwsw (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnctoiblt (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slncriiuuy (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slncmuayli (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnciguegg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnchwnrow (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnchpewmk (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slncgutkyz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slncfffqbi (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slncdmcgtq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnccduioc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnccbvjvj (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slncbiuaqy (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slncazjjys (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slncabcxyz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnbzmpxultk (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnbxwiltsbk (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnbxdtreqqe (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnbszoimdgd (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnbsmulycfl (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnbrbtiqwcw (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnbqotqnenc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnbqgkcwnnk (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnbpspbuqxg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnbntdpwgua (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnblctcmige (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnbabcxyz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnaxpliqmsh (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slnaabcxyz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slg99185 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slg20883 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in slg12549 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sl-yh-out-abcxyz1 (RubyGems)
1 compromised version
Page 53 of 5,120