Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
255,979 total · sorted newest first- Jul 7, 2026
Malicious code in chmid8340x619659 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid8330x616863 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid8320x613915 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid8310x612257 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid8300x612010 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid8200x584843 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid8000x584612 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid8000x530358 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid7500x584348 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid7500x528543 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid7000x584110 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid7000x527141 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid6500x525265 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid6000x582552 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid6000x524101 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid5000x580964 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid4000x579098 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chmid10000x542027 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaitestsvn1778552651 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaitesthg1778552644 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaitestgit1778552630 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaitestfossil1778552663 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaitestbzr1778552654 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaifetch177855598147 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaifetch177855557914 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaifetch177855509941 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaifetch177855393242 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaifetch177855390730 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaifetch177855388228 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaifetch177855382980 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaifetch177855329769 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaifetch177855308016 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaifetch177855306194 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaifetch177855303836 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaifetch177855300091 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaifetch177855296778 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatoaifetch177855288717 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in chatgptproxytmp (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in caljanzzjcq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in c00_arcguide (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in bridgebbb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in bridgeaaa (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in br3e6a6270eb (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in botwoutput9d53 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in botwindscrape9d53 (RubyGems)
3 compromised versions
- Jul 7, 2026
Malicious code in bottestjanmid39d53 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in bottestjanmid29d53 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in bottestjanmid19d53 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in bottestjanmid09d53 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in benign200012 (RubyGems)
1 compromised version
Page 75 of 5,120