Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
255,969 total · sorted newest first- Jul 7, 2026
Malicious code in rootfetch1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rootfetch002 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rkproxyzen (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rjan5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rjan4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rjan3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rjan2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rjan1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rfetchj (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rfetchi (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rfetchh (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rfetchg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rfetchf (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rfetche (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rfetchd (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rfetchc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rfetchb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rfetcha (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rfetch6 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rfetch5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rfetch4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rfetch3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in rfetch2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in retryqq9 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in retryqq8 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in retryqq7 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in retryqq6 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in retryqq5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in retryqq4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in retryqq3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in retryqq2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in retryqq15 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in retryqq14 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in retryqq13 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in retryqq12 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in retryqq11 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in retryqq10 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in retrylasttry1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in qagzskimfsb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in qagwpyrinwn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in qagwhdzmmuz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in qagwgygtafv (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in qagvzhtvhwi (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in qagpujyfgjw (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in qagnvmckazu (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in qagnajvsmyl (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in qagloqwrnfv (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in qagfypuewln (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in qagfoukolga (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in qagehndongu (RubyGems)
1 compromised version
Page 56 of 5,120