Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,565 total · sorted newest first- Sep 22, 2026
Malicious code in benlder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bendler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bendlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bemdler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in beiundler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bbusndler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bbunlder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bbundler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bbundlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bbumdler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bbiundler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bausndler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in baunlder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in baundler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in baundlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in baumdler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in basndler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in banlder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bandler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bandlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in bamdler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in baiundler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in ausndler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in aunlder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in aundler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in aundlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in aumdler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in aubndler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in aiundler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in abusndler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in abunxler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in abunlder (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in abundler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in abundlef (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in abumdler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in abndler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in abiundler (RubyGems)
2 compromised versions
- Sep 22, 2026
Malicious code in @mikudeveloper/baileys (npm)
1 compromised version
- Sep 22, 2026
Malicious code in @mr-supun-fernando/supunmd-bail (npm)
1 compromised version
- Sep 22, 2026
Malicious code in dip.ioc.extensions (NuGet)
1 compromised version
- Sep 22, 2026
Malicious code in dip.ioc (NuGet)
1 compromised version
- Sep 22, 2026
Malicious code in dip.infrastructure.context (NuGet)
1 compromised version
- Sep 22, 2026
Malicious code in dip.infrastructure (NuGet)
1 compromised version
- Sep 22, 2026
Malicious code in dip.api (NuGet)
1 compromised version
- Sep 22, 2026
Malicious code in chai-logger (npm)
1 compromised version
- Sep 22, 2026
Malicious code in cisco-github-simple (npm)
1 compromised version
- Sep 22, 2026
Malicious code in take-home-caller-id (npm)
1 compromised version
- Sep 22, 2026
Malicious code in @tesla-insurance/vinless-quote (npm)
1 compromised version
- Sep 22, 2026
Malicious code in tlxbnhd (npm)
1 compromised version
- Sep 22, 2026
Malicious code in tldriver (npm)
1 compromised version
Page 89 of 7,312