Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
255,969 total · sorted newest first- Jul 7, 2026
Malicious code in oaiex4736401 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiex4149420 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiex3900663 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiex3222069 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiex1182709 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiex0549290 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaiex0014506 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaidx7402019 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaidx6514197 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaidx6135652 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaidx4526859 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaidx3879209 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaidx3492001 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaidx3409275 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaidx1469215 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaidx1466937 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaidx1337585 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaidx1169327 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaidx0276239 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaicx8859010 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaicx6062340 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaicx4433606 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaicx3857133 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaicx3769699 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaicx2721076 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaibx7324267 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaibx4676369 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaibx1202338 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaibx0092307 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaibootz9218 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaibooty9217 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaibootx8192 (RubyGems)
3 compromised versions
- Jul 7, 2026
Malicious code in oaibo825590 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaibo396866 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in oaibo048288 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in nwcid324 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in nwcid323 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in nwcid322 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in nwcid321 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in nwcid320 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in nwcid319 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in nwcid318 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in nwcid316 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in nwcid315 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in nwcid311 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in newswandweekjan5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in newswandweekjan4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in newswandweekjan3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in newswandweekjan2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in newswandweekjan1 (RubyGems)
1 compromised version
Page 63 of 5,120