Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
255,969 total · sorted newest first- Jul 7, 2026
Malicious code in sbc55dd196 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sba517fb66 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sb759e41fa (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sb70efdeba (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sb50a0902f (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sb391423d1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sb06ac4700 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sb01dc8349 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in saf368b4bc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in saee8cba76 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in saeb369b8c (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sae6a0e752 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sad01504db (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sacb0f5cd9 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sac7635b0f (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sa9695b9d2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sa93cd2c64 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sa70855610 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sa7055ee3e (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sa6ed9cec3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sa64ce1145 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sa62b50d0b (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sa35a63c8a (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sa20a7aec4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in sa00810ac0 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rxwws (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rxwsemi (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rxwjq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rxwandmeet (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rxwandjan (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rxsws (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rxsouthmeet (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rxsouthjan (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rxsjq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rxlws (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rxljq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rxlambmeet (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rxlambjan (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rubydocmeta1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rtok3xw993 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rootxproxytest (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rootxproxyhg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in roottestkey10726 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rootprobejan991 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rootmv26543 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rootmv25753 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rootmtest14978 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rootll2545 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rootjina18601 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rootjcal8873 (RubyGems)
1 compromised version
Page 55 of 5,120