Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
255,976 total · sorted newest first- Jul 7, 2026
Malicious code in lbmztrpfjb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbmtq9x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbmtq8x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbmtq7x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbmtq6x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbmtq5x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbmtq4x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbmtq3x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbmtq2x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbmtq1x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbmtq11x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbmtq10x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbmtq0x (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lblzhhumah (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbjjpuyqqs (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbifxeuorg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbhnlsxtbs (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbfajkdltu (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbeng658 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcalxsdgrprjs (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcalxjlnzfios (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcalxhogwjdqe (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcalxhayqouyj (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcalxeyndhbdj (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcalxdsciamuf (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcalxcnrlgidi (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcalxagpsupya (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcaltestywvidk (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcaltestyoeaua (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcaltestrlmcpe (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcaltestmvxcve (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcaltestlredrf (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcaltestljjirx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcaltestipnern (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcaltestgyeryc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcaltestcwukld (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcaltestcczorx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lbcaltestawsqsb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lat2cal1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamws5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamtrigger71 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamroot4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamnew10 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamnew09 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamnew08 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamnew07 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamnew06 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamnew05 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamnew04 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamnew03 (RubyGems)
1 compromised version
Page 68 of 5,120