Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
255,969 total · sorted newest first- Jul 7, 2026
Malicious code in oailamtest1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oailambproxy1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaikx8889218 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaikx8809714 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaikx8326270 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaikx5508394 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaikx5119809 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaikx2706764 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaikx2502114 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaikfossilwlvflh (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijx9538883 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijx7803530 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijx7718528 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijx7497893 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijx7061603 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijx6438369 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijx5011813 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijx3058720 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijx1860853 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijx1603962 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijx1165628 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijx0303634 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijx0156671 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijhgzfujin (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijhguviith (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijhgnnwgqq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijhgmzryzc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijhghatpit (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijgitzxwjqb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijgitwelcpe (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijgitjtybra (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijgitfzlsik (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijgitdmeevm (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijfossilvwcsvc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijfossilunswgx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijfossilgsvaqj (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijfossilatdduq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijfossilafvimh (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijbzrvidlyq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijbzrqtntsq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijbzrgtxirk (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijbzrevovmk (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijbzravdemr (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaijanla (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiix9664993 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiix8443749 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiix7984341 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiix7194839 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiix7006631 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiix5537218 (RubyGems)
1 compromised version
Page 61 of 5,120