Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
255,981 total · sorted newest first- Jul 7, 2026
Malicious code in aiuovjltsvrq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiumidgzwyzv (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiukjisdgcxp (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiuexzbmeygo (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiuepfczrxji (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiudhvnuubzt (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aiudazqldpcn (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aituhdbvptgs (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aitfnurhpxuo (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aitdodvcpoam (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aitdaludfnfq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aidoklxlhvfkeq (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aicalunosquaz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aicaltroixtqg (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aicaltdfdlekz (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aicalojdhdxoa (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in aicalllngxwwh (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in agfossstd21 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in agfosssacre22 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in agfosslic24 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in agfossgrant23 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in agfosscab20 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in agentoaitestabc123 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in abcfoobar1778550632348198 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in abcfoobar1778550629075869 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in abcfoobar1778550625683711 (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in a0a_arcgraph (RubyGems)
4 compromised versions
- Jul 7, 2026
Malicious code in a00_arcguide (RubyGems)
1 compromised version
- Jul 7, 2026
Malicious code in scanvia (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in scan-checker (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in quatre (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in pygremlinbox-malware-network-indicators (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in pygremlinbox-malware-install-execution (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in pygremlinbox-malware-cryptomining-indicators (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in pygremlinbox-malware-credential-harvesting (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in pygremlinbox-malware-code-obfuscation (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in pygremlinbox-malware-c2-beacon (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in pycryptoshuffle (PyPI)
2 compromised versions
- Jul 7, 2026
Malicious code in piirgg (PyPI)
4 compromised versions
- Jul 7, 2026
Malicious code in notrandompacketname (PyPI)
3 compromised versions
- Jul 7, 2026
Malicious code in myproject234 (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in cyberday26szymon-payments (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in cyberday26szymon-logging (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in cyberday26szymon-auth (PyPI)
1 compromised version
- Jul 7, 2026
Malicious code in vspropertypages (NuGet)
1 compromised version
- Jul 7, 2026
Malicious code in security_hacks (NuGet)
1 compromised version
- Jul 7, 2026
Malicious code in hackney.core.jwt (NuGet)
1 compromised version
- Jul 7, 2026
Malicious code in hackney.core.enums (NuGet)
1 compromised version
- Jul 7, 2026
Malicious code in @pimy-b2cweb/apiclient-b2cweb-r2 (npm)
1 compromised version
- Jul 7, 2026
Malicious code in @pimy-b2cweb/frontend-lib (npm)
1 compromised version
Page 77 of 5,120