Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
255,969 total · sorted newest first- Jul 7, 2026
Malicious code in qageegqgmnk (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in qagcimtffzt (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in qagaismkupj (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pwnwtest1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pwnp999 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pwnldir1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pwnlambtest4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pwnlambjan6 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pwnlambjan5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pwnlambhome2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pwnlambhome1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pwnlambcal3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pwnlambcal2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pwnlambcal1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in prxf2ea0504a0 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in prxef6dfdf4be (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in prxe87db1bbc7 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in prxdfbdfbeb3b (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in prxca79e95716 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in prx975fe5e3fe (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in prx92ddbfc4c5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in prx6cfa4a2be2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in prx5a01811907 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in prx51cee8dbf7 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in prx48d92bd9a6 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in prx4542f26b08 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in prx34ae9b4ae3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in prx1b49033905 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in prx06e608f6da (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxyzz1778548845 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxytf7cceba2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxytf4d297de (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxytf0ccd93e (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxytestabcxyz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxytcf1f8d7b (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxytceffa3ec (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxyta4d404a4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxyta14c1bf1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxyt8c6730c3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxyt8be2d980 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxyt8b7e7610 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxyt7f4a816d (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxyt7afe6600 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxyt5d33dbc8 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxyt1ef3994c (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxyt18c96c16 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxyt0dd1ee25 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxymeta646478 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxymeta646423 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxymeta646420 (RubyGems)
1 compromised version
Page 57 of 5,120