Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,565 total · sorted newest first- Sep 22, 2026
Malicious code in bumdled (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlear (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlea (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdle (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdldr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlar (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdlaer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdker (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdiler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdier (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdelr (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdeler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdeer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumddler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdaler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumdaer (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumcler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumaler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bumadler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bulsndler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bulnlder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bulndler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bulndlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bulnder (RubyGems)
1 compromised version
- Sep 22, 2026
Malicious code in bulmdler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bulder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bukdler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bujlder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bujdler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bujdlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buisndler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buinxler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buinlder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buindler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buindlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buimdler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buidler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buidlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buhlder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buhdler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buhdlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buesndler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buenlder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buendler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buendlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buemdler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buelder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buedler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in buedlef (RubyGems)
2 compromised versions
Page 84 of 7,312