Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
255,976 total · sorted newest first- Jul 7, 2026
Malicious code in fosscalwands (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in fosscallamb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in foofoofooproxyxyz1778553602 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in fooaid503724d (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in foo123 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in ffxnzzez0bc (RubyGems)
3 compromised versions
- Jul 7, 2026
Malicious code in fadtestgemx1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in f2fe-s1 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in extfetchedwand1778556507 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in extfetchedwand1778556472 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in extfetchedwand1778555915 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in extfetchedwand1778555753 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in extfetchedwand1778555624 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in exfiltestwand5 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in exfiltestwand4 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in exfiltestwand3 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in exfiltestwand2 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in exfiltestwand (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in exfiltesttrigger6 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in enc30809 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in enc30778 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in enc30747 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in enc30716 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in enc30685 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in enc30654 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in enc30623 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in enc30582 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in enc30551 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in enc30520 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in eiltestgit123 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in eilsvntestxzutq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in eilsvntestanumw (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in eiljtwszwbcn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in eiljtpfoucdt (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in eiljtjmugmrf (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in eiljtiiahbuj (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in eiljanlanhnz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in eiljanlambpfwo (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in eilhgtestvhkue (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in eilhgtestfsmmg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in eilfossiltestlfpxe (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in eilbzrtestxnrzo (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in eilbzrtestomvjv (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in dwpdf1248881 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in dwpdf1248851 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in dwpdf1248841 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in dwpdf1248771 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in dwpdf1248751 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in docfetchxyz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in docdesignproxy4647 (RubyGems)
1 compromised version
Page 73 of 5,120