Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,619 total · sorted newest first- Jun 25, 2024
Malicious code in bunto-test_plugin_malicious (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bunto-test_plugin (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bulldoggy_filesystem (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in brightbox_boxgrinder-plugins (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in branch-raker (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in brakeman-translate_checkstyle_format (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bosh_plugin-pipeline (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bosh_plugin-generator (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bosh-lastpass_plugin (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bosh-cli_plugin_redis (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bosh-cli_plugin_consul (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in blinkman-twitter-search (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in blinkist_airbrake-scrubber (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in blade-sauce-labs_plugin (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in blacklight-advanced_search (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bitmovin_api (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bisearch-enzim_hu (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in binary-search_tree (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in binary-search_frequency (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bin-search (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in biblesearch_api (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in beta_pod (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in beta-tools (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in beta-invites (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in benchmark_plot (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in belong_plugin-rds-pgsql-log (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in beerdb-api (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in beer-in_the_evening (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in beer-bash (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bedrock_capistrano-uploads (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bbs-uploader (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in battle_on (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in battery-growl (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in battering-ram (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batsd_dash (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batman_rails (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batched-query (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batch_rails2 (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batch_rails (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batch-translations (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batch-it (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batch-insert (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batch-actions (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batali_wedge (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batali_tk (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in batali_infuse (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in basic_stats (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in barometer-weather-bug (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in barely-searchable (RubyGems)
1 compromised version
- Jun 25, 2024
Malicious code in bard_rake (RubyGems)
1 compromised version
Page 6622 of 7,293