Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
255,969 total · sorted newest first- Jul 7, 2026
Malicious code in oaiix4587168 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiix4070985 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiix3669509 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiix1059244 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiix0600089 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiix0379958 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiix0360536 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiix0231326 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaihx9923604 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaihx8693617 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaihx8175223 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaihx7985797 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaihx7924258 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaihx7579061 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaihx7237922 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaihx5974804 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaihx0305933 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaihx0157786 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaigx9094125 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaigx8693871 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaigx7857181 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaigx5861576 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaigx5578224 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaigx4634836 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaigx4516770 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaigx1767798 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx9741380 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx9677940 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx9667097 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx9269956 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx8889601 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx8755814 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx8306741 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx7943598 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx7303384 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx7129963 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx6387627 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx4260376 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx3608457 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx2401408 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx2280367 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx1955773 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx1757803 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifx0927711 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifetchmde1778385631 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaifetchmde1778385544 (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in oaifetchgemugkejy (RubyGems)
3 compromised versions
- Jul 7, 2026
Malicious code in oaiex9823513 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiex8413575 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiex7410346 (RubyGems)
1 compromised version
Page 62 of 5,120