Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
255,969 total · sorted newest first- Jul 7, 2026
Malicious code in oakmi15300 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi15200 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi15100 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oakmi15000 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfwk9 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfwk8 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfwk7 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfwk6 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfwk5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfwk4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfwk3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfwk2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfwk1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfscr (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfplan (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfmeetall (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklflic (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfjan9 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfjan8 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfjan7 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfjan6 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfjan5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfjan4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfjan3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfjan2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfjan1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfjan0 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfcom (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaklfcab (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiztestxyz123 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaixhgdpvkpij (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaivcstest1778554896 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaitsvnxpamle (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaitsvnxlorty (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaitsvnxlnrat (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaithgxwnvon (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaithgxmylrf (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaithgxgwreb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaitgitxrclle (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaitgitxqgxlu (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaitgitxppibu (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaitfossilxxipsj (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaitfossilxqsswm (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaitfossilxbnowl (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaitest1778473828 (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in oaitbzrxqfldb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaitbzrxmtfoa (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaitbzrxfredw (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaisurveytestzz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipyvtoeydiu (RubyGems)
1 compromised version
Page 59 of 5,120