Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
255,969 total · sorted newest first- Jul 7, 2026
Malicious code in skytestpluginsdf (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in shopify-cli-extensions (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in shopify-cli-dependencies (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in shipstudyhelper1778418891 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgyewbarsi (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgxtvmueur (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgxqzbqqph (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgxnwefney (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgxdhvmbhl (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgxbvusaqz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgvtbcatnr (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgvgyorjgr (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sguxfwfnet (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgtyoqebjb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgrernmauc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgrcdgzate (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgqokjrgqt (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgpakpubiz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgpajdnsoz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgmexribvq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgkbxnctcg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgjqdnyybe (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgjcvwjwwo (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgicgptpuh (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sghwnriwgq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sghsvfnjgk (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sghrlhoxql (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sghizaeigy (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sggenmlieh (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sggcezgmtn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgfnnyznra (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgfesdiqyo (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgfcchuzox (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgeymwpcar (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgekvdhxno (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sgccmmheke (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sfded640 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sfc0e8fa (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sfb9199b (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sf727fc0 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sf72647c (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sf5770a8 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sf3481c8 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sf1d68a9 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sf126006 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sf042efe (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in secrequeryabc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in scallistajxel (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in scaljanbfksf (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in scaljan2momxm (RubyGems)
1 compromised version
Page 54 of 5,120