Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
255,976 total · sorted newest first- Jul 7, 2026
Malicious code in lamnew02 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamnew01 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamnew00 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lammeet03 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lammeet02 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lammeet01 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lammeet00 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lammcal6 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lammcal5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lammcal4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lammcal1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamlove2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamlove1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamk04 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamk03 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamk02 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamk01 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamk00 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamjanraw13624 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamj04 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamj03 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamj02 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamj01 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamj00 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamhgtestgoog13067 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamhgip123959 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamhgdemo17360 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamhg57714 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamhack1778555394 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamfoss28330 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamedoc1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamdoc17474 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamdoc17465 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamdoc17451 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamdoc17395 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamdoc17385 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lamcounproxyabc001 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambzip16834 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambx9652772 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambx6905360 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambx6561211 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambx5283681 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambx5165217 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambx4123082 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambx1780920 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambx1623642 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambx0453826 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambsvnproxyoai (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambqueryjanabc (RubyGems)
3 compromised versions
- Jul 7, 2026
Malicious code in lambqproxy (RubyGems)
1 compromised version
Page 69 of 5,120