Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,565 total · sorted newest first- Sep 22, 2026
Malicious code in bunldser (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldrr (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldrer (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldre (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldr (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldor (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldoer (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldner (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldler (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldlef (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldir (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldier (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldet (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldesr (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunlders (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunlderr (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldero (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldern (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunlderl (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunlderi (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldere (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldera (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunlder-ruby (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunlder-rb (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunlder-lib (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunlder-gem (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldeor (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldeo (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldenr (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldelr (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldeir (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldei (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldef (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldeer (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldee (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunlded (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldear (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldea (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunlde (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunlddr (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunldar (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bunldaer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunlcer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunlaer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunlader (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunkder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buniler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunilef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunilder (RubyGems)
2 compromised versions
Page 79 of 7,312