Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
255,976 total · sorted newest first- Jul 7, 2026
Malicious code in lambpxnew14300 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambpx26687 (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in lambproxyx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambproxytest (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambproxyhackabcxyz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambproxyfetchx (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambproxya (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambproxy5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambproxy4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambproxy3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambproxy2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambproxy1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambproxjanb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambproxjan (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambprobe7763 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambprobe4344 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambprobe4343 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambprobe4342 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambprobe4341 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambprobe4340 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambmod644262 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambmine1778568108 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambjanonlym (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambhgqueryxyz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambhgqueryentxyz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambhgproxyoai (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambhgproxy2oai (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambhgampxyz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambfossilproxyoai (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambfetch006 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambfetch005 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambfetch004 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambfetch003 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambfetch002 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambfetch001 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambethxproxyabcabc (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambethtestdef (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambethssrfhack (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in lambethssrfcal (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambethssrfbuild (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in lambethscraper1778555936 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambethscraper1778549610 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambehgrobe26250 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambehgnewhttp31593 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambehgnew1593 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambegitx4062 (RubyGems)
2 compromised versions
- Jul 7, 2026
Malicious code in lambcal434a2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambcal434a1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambbzrproxyoai (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in lambQ4346 (RubyGems)
1 compromised version
Page 70 of 5,120