Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,565 total · sorted newest first- Sep 22, 2026
Malicious code in bundlfe (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlf (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlev (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundleu (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlet (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlesr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlesf (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlers (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlerr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlero (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlern (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlerl (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundleri (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlerf (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlere (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlera (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundler-ruby (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bundler-rb (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bundler-lib (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bundleor (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundleof (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundleo (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlenr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlenf (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlelr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlelf (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundleir (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundleif (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlei (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundleg (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlefs (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlefr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlefo (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlefn (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlefl (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlefi (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundleff (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlefe (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlefa (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlef-ruby (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bundlef-rb (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bundlef-lib (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bundlef-gem (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bundlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundleer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundleef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlee (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundled (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlec (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bundlear (RubyGems)
2 compromised versions
Page 81 of 7,312