Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
255,976 total · sorted newest first- Jul 7, 2026
Malicious code in metatestfpepbeeo (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in metatesteyuhnqlw (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in metatestabcxyz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in meet8405a (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in meet8402a (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in meet8249a (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in meet8178a (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8405v5lmc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8405v4bpo (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8405v3bjn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8405v2llz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8405v1rjo (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8405v0nhw (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8403v5qvm (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8403v4kng (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8403v3qkt (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8403v2tew (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8403v1zxu (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8403v0lws (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8402v5qwf (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8402v4rgs (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8402v3uig (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8402v2ggi (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8402v1gfq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8402v0nty (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8320v5tkv (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8320v4scj (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8320v3rwa (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8320v2umh (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8320v1gep (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8320v0utd (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8249v5qnb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8249v4lvd (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8249v3xib (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8249v2jsh (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8249v1gsl (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in m8249v0oem (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in ltestprobe (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in ltax438 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lpp29938 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lpp19932 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lpp09927 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lpdfdev8687 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lpdfbudap8682 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lp490x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lp490 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lp489x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lp489 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lp357 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lp346 (RubyGems)
1 compromised version
Page 65 of 5,120