Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 25, 2024
Malicious code in okra (RubyGems)
5 compromised versions
- Jun 25, 2024
Malicious code in nhtsa-vin (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in murmuring-spider (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in multi-movingsign (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in movingsign-api (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in moving-words (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in moving-images (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in moving-average (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in movie-spider (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in mars-rover_alvin (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in logstash_codec-cloudtrail (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in logstash_codec-cloudfront (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in logstash_codec-cef (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in logstash_codec-bytes (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in logstash_codec-avro (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in logstash_2-output-rollbar (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in logstash-codec-bulk-es (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in logstash-codec-avro-schema_registry (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in logs-visualizer (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in logs-viewer (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in logs-tf (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in logging_logstash (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in log4r_logstash (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in living-dead (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in lita_telegram-plus (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in lita_telegram (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in lita_onewheel-beer-wework (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in lita_onewheel-beer-wayfinder (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in lita_onewheel-beer-upperlip (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in lita_onewheel-beer-tin-bucket (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in lita_onewheel-beer-pints (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in lita_onewheel-beer-loyal-legion (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in lita_onewheel-beer-growlers (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in lita_onewheel-beer-craftpourhouse (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in lita_onewheel-beer-btu (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in lita_onewheel-beer-base (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in lita_onewheel-beer-baileys (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in lita_onewheel-beer-apex (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in lita_onewheel-beer-abvpub (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in liquid-renderer (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in lines-mixer (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in language-mixer (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in lang-cards (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in kwai-gitlab (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in kevins-propietary_brain (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in kevin-thompson (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in jmcnevin-rghost-barcode (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in jenkins-statsd (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in jekyll-rp-logs (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in jaconda-telegram (RubyGems)
1 compromised version
Page 6618 of 7,293