Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
255,969 total · sorted newest first- Jul 7, 2026
Malicious code in proxymeta646419 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxymeta646418 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxymeta1270 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxylambethabc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in proxyfooabc53ee9f5f (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in probervdgcosw (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in probejiqptzco (RubyGems)
6 compromised versions
- Jul 7, 2026
Malicious code in probe1778554668 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pdftoilet1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pdfpalais1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pdfmeno1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pdflahueca1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pdfkent1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pd131119hccc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pd131118zfvg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pd130989hqmb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pd130985cmcb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pd130981ssqq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pd130931tmbp (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pd130924vejy (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pd130917vxnt (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in pathpkg94321zz (RubyGems)
3 compromised versions
- Jul 7, 2026
Malicious code in pathpkg94321yy (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in oakmi18000 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi17900 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi17800 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi17700 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi17600 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi17500 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi17400 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi17300 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi17200 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi17100 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi17000 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi16900 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi16800 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi16700 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi16600 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi16500 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi16400 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi16300 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi16200 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi16100 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi16000 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi15900 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi15800 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi15700 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi15600 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi15500 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi15400 (RubyGems)
1 compromised version
Page 58 of 5,120