Skip to content
OpenAdvisories

Supply chain

Malicious packages · RubyGems

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,347 npm 223,209 PyPI 11,994 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

4,316 reports · Feed

  • RubyGems
    control-character-command-injection 1.0.1
    MAL-2026-18764 amazon-inspector
  • RubyGems
    agentic-call-control 1.1.8
    MAL-2026-18763 amazon-inspector
  • RubyGems
    dynamic-object-handler 1.0.1
    MAL-2026-18766 amazon-inspector
  • RubyGems
    donjon-ledger 2.0.2
    MAL-2026-18765 amazon-inspector
  • RubyGems
    w002yardprobe 0.0.4, 0.0.5
    MAL-2026-18599 amazon-inspector
  • RubyGems
    brida-frida-hooks 1.0.1
    MAL-2026-18598 amazon-inspector
  • RubyGems
    dopc-client 1.0.0, 10.0.0
    MAL-2026-18518 amazon-inspector
  • RubyGems
    intercom-react-native-example-e2e-tests 1.0.1
    MAL-2026-18462 ossf-package-analysis, amazon-inspector
  • RubyGems
    shoaib-unity 1.0.1
    MAL-2026-18461 ossf-package-analysis, amazon-inspector
  • RubyGems
    strutil-core 1.0.1
    MAL-2026-19054 1 IOC
  • RubyGems
    macs-shoaibs-pro17 90002.1
    MAL-2026-18436 ossf-package-analysis, amazon-inspector
  • RubyGems
    zzhelloworld_socktest 0.1.9, 0.1.5, 0.1.6, 0.2.0, 0.1.7, 0.2.1, 0.1.8
    MAL-2026-18126 amazon-inspector
  • RubyGems
    eth-gas-oracle 0.9.1
    MAL-2026-17786 amazon-inspector
  • RubyGems
    multichain-rpc 0.9.1
    MAL-2026-17791 amazon-inspector
  • RubyGems
    web3-signer-kit 0.9.1
    MAL-2026-17801 amazon-inspector
  • RubyGems
    mev-sandwich-detect 0.9.1
    MAL-2026-17790 amazon-inspector
  • RubyGems
    crypto-tax-export 0.9.1
    MAL-2026-17782 amazon-inspector
  • RubyGems
    airdrop-eligibility-check 0.9.1
    MAL-2026-17779 amazon-inspector
  • RubyGems
    btc-fee-estimator 0.9.1
    MAL-2026-17781 amazon-inspector
  • RubyGems
    defi-yield-calculator 0.9.1
    MAL-2026-17783 amazon-inspector
  • RubyGems
    staking-apr-fetcher 0.9.1
    MAL-2026-17796 amazon-inspector, ossf-package-analysis
  • RubyGems
    seed-phrase-validator 0.9.1
    MAL-2026-17794 amazon-inspector, ossf-package-analysis
  • RubyGems
    erc20-approve-audit 0.9.1
    MAL-2026-17785 amazon-inspector, ossf-package-analysis
  • RubyGems
    evm-tx-decoder 0.9.1
    MAL-2026-17787 amazon-inspector, ossf-package-analysis
  • RubyGems
    tron-trc20-utils 0.9.1
    MAL-2026-17798 amazon-inspector, ossf-package-analysis
  • RubyGems
    nft-metadata-resolver 0.9.1
    MAL-2026-17792 amazon-inspector, ossf-package-analysis
  • RubyGems
    hd-wallet-generator 0.9.1
    MAL-2026-17789 amazon-inspector, ossf-package-analysis
  • RubyGems
    wallet-balance-scanner 0.9.1
    MAL-2026-17799 amazon-inspector, ossf-package-analysis
  • RubyGems
    ton-jetton-tools 0.9.1
    MAL-2026-17797 amazon-inspector, ossf-package-analysis
  • RubyGems
    dex-router-abis 0.9.1
    MAL-2026-17784 amazon-inspector, ossf-package-analysis
  • RubyGems
    wallet-hd-derive 0.9.1
    MAL-2026-17800 amazon-inspector, ossf-package-analysis
  • RubyGems
    perp-funding-rates 0.9.1
    MAL-2026-17793 amazon-inspector, ossf-package-analysis
  • RubyGems
    block-explorer-api 0.9.1
    MAL-2026-17780 amazon-inspector, ossf-package-analysis
  • RubyGems
    xrp-ledger-utils 0.9.1
    MAL-2026-17802 amazon-inspector, ossf-package-analysis
  • RubyGems
    sol-mint-utils 0.9.1
    MAL-2026-17795 amazon-inspector, ossf-package-analysis
  • RubyGems
    gas-refuel-bridge 0.9.1
    MAL-2026-17788 amazon-inspector, ossf-package-analysis
  • RubyGems
    tx-broadcast-utils 1.0.0
    MAL-2026-17612 amazon-inspector 2 IOCs
  • RubyGems
    tron-rb 1.0.0
    MAL-2026-17611 amazon-inspector 2 IOCs
  • RubyGems
    bitcoij-ruby 1.0.0
    MAL-2026-17585 amazon-inspector 2 IOCs
  • RubyGems
    bip39-wordlist-utils 1.0.0
    MAL-2026-17581 amazon-inspector 2 IOCs