Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
255,969 total · sorted newest first- Jul 7, 2026
Malicious code in oaipybzwmezig (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipxvcvhvqii (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipwysipnjet (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipwsgyblajm (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipvtpwpldhz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipulhsxmtjc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipuetanenak (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipttxrgucrm (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipttacwhdpp (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiprpfnweljs (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiproxytestabc789 (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in oaipqsobhbexg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipphbsbxqgw (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaippehsfqcmm (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipozmgqmeyz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipojrqrusxl (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipobdflfoog (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipnldvhihwd (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipmxktcwywo (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipmfgnywddt (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiplmbtestsvn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipkesbgrrqn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipjupjfdrys (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiphawmupjos (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipgttatggxy (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipforvmdtrw (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipefyjwkzmx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipefrlkaloi (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipdspfshntp (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipdqpwidosk (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipbyqhfcyqh (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipbxmwzyrjk (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipaqfeefizk (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaipacnfmwfud (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oailme (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oailmd (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oailmc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oailmb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oailma (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oailm9 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oailm8 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oailm7 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oailm6 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oailm5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oailm4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oailm3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oailm2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oailm1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oailamtest3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oailamtest2 (RubyGems)
1 compromised version
Page 60 of 5,120