Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,565 total · sorted newest first- Sep 22, 2026
Malicious code in bunidler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunidlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunider (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunfler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunflef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buneler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunelef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunelder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunedler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunedlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buneder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunduer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bunduef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundsler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundslef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundrler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundrlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundper (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundpef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundoler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundolef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundoer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundoef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundnler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundnlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlwr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlwf (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlur (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundluf (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlsr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlsf (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlser (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlsef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlrr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlrf (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlrer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlref (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlre (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlor (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlof (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundloer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundloef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlner (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlnef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundller (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundllef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlir (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlif (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlier (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlief (RubyGems)
2 compromised versions
Page 80 of 7,312