Skip to content
OpenAdvisories

Supply chain

Malicious packages · RubyGems

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

4,319 reports · Feed

  • RubyGems
    tron-rb 1.0.0
    MAL-2026-17611 amazon-inspector 2 IOCs
  • RubyGems
    bitcoij-ruby 1.0.0
    MAL-2026-17585 amazon-inspector 2 IOCs
  • RubyGems
    bip39-wordlist-utils 1.0.0
    MAL-2026-17581 amazon-inspector 2 IOCs
  • RubyGems
    etherdum.rb 1.0.0
    MAL-2026-17599 amazon-inspector, ossf-package-analysis 2 IOCs
  • RubyGems
    crylto-toolbox 1.0.0
    MAL-2026-17591 amazon-inspector, ossf-package-analysis 2 IOCs
  • RubyGems
    keccka 1.0.0
    MAL-2026-17604 amazon-inspector, ossf-package-analysis 2 IOCs
  • RubyGems
    solaan-ruby 1.0.0
    MAL-2026-17610 amazon-inspector, ossf-package-analysis 2 IOCs
  • RubyGems
    cryoto-toolbox 1.0.0
    MAL-2026-17592 amazon-inspector, ossf-package-analysis 2 IOCs
  • RubyGems
    bitcion-ruby 1.0.0
    MAL-2026-17584 amazon-inspector, ossf-package-analysis 2 IOCs
  • RubyGems
    ligbtning-invoice 1.0.0
    MAL-2026-17605 amazon-inspector, ossf-package-analysis 2 IOCs
  • RubyGems
    etheremu.rb 1.0.0
    MAL-2026-17600 amazon-inspector, ossf-package-analysis 2 IOCs
  • RubyGems
    kecack 1.0.0
    MAL-2026-17603 amazon-inspector, ossf-package-analysis 2 IOCs
  • RubyGems
    lightinng-invoice 1.0.0
    MAL-2026-17607 amazon-inspector, ossf-package-analysis 2 IOCs
  • RubyGems
    bitciin 1.0.0
    MAL-2026-17582 amazon-inspector, ossf-package-analysis 2 IOCs
  • RubyGems
    crypti-toolbox 1.0.0
    MAL-2026-17593 amazon-inspector, ossf-package-analysis 2 IOCs
  • RubyGems
    lighthing-invoice 1.0.0
    MAL-2026-17606 amazon-inspector, ossf-package-analysis 2 IOCs
  • RubyGems
    bitcion 1.0.0
    MAL-2026-17583 amazon-inspector, ossf-package-analysis 2 IOCs
  • RubyGems
    ethereum-tx-helper 1.0.0
    MAL-2026-17601 amazon-inspector, ossf-package-analysis 2 IOCs
  • RubyGems
    bitcoin-rpc-lite 1.0.0, 1.0.3
    MAL-2026-17587 amazon-inspector, ossf-package-analysis 1 IOC
  • RubyGems
    web3-eth-utils 1.0.0, 1.0.3
    MAL-2026-17616 amazon-inspector, ossf-package-analysis 1 IOC
  • RubyGems
    btc-wallet-tools 1.0.0, 1.0.3
    MAL-2026-17589 amazon-inspector, ossf-package-analysis 1 IOC
  • RubyGems
    base58-check-helper 1.0.0
    MAL-2026-17580 amazon-inspector, ossf-package-analysis 2 IOCs
  • RubyGems
    lightning-invoice-utils 1.0.0
    MAL-2026-17608 amazon-inspector, ossf-package-analysis 2 IOCs
  • RubyGems
    utxo-set-utils 1.0.0
    MAL-2026-17613 amazon-inspector, ossf-package-analysis 2 IOCs
  • RubyGems
    wallet-crypto-utils 1.0.0, 1.0.3
    MAL-2026-17615 amazon-inspector, ossf-package-analysis 1 IOC
  • RubyGems
    blockchain-sync-utils 1.0.0
    MAL-2026-17588 amazon-inspector, ossf-package-analysis 2 IOCs
  • RubyGems
    merkle-proof-lite 1.0.0
    MAL-2026-17609 amazon-inspector, ossf-package-analysis 2 IOCs
  • RubyGems
    web3-sign-helper 1.0.0
    MAL-2026-17617 amazon-inspector, ossf-package-analysis 2 IOCs
  • RubyGems
    electrum-protocol-lite 1.0.0
    MAL-2026-17596 amazon-inspector, ossf-package-analysis 2 IOCs
  • RubyGems
    crypto-key-utils 1.0.0
    MAL-2026-17594 amazon-inspector, ossf-package-analysis 2 IOCs
  • RubyGems
    bitcoin-address-utils 1.0.0
    MAL-2026-17586 amazon-inspector, ossf-package-analysis 2 IOCs
  • RubyGems
    coinmarket-utils 1.0.0
    MAL-2026-17590 amazon-inspector, ossf-package-analysis 2 IOCs
  • RubyGems
    hdkey-derive-helper 1.0.0
    MAL-2026-17602 amazon-inspector, ossf-package-analysis 2 IOCs
  • RubyGems
    crypto-mnemonic-tools 1.0.0, 1.0.3
    MAL-2026-17595 amazon-inspector, ossf-package-analysis 1 IOC
  • RubyGems
    wallet-backup-tool 1.0.0
    MAL-2026-17614 amazon-inspector, ossf-package-analysis 2 IOCs
  • RubyGems
    eth-keystore-utils 1.0.0, 1.0.3
    MAL-2026-17598 amazon-inspector, ossf-package-analysis 1 IOC
  • RubyGems
    eth-address-utils 1.0.0, 1.0.3
    MAL-2026-17597 amazon-inspector, ossf-package-analysis 1 IOC
  • RubyGems
    request-guard 1.0.0, 1.0.1
    MAL-2026-17569 amazon-inspector 1 IOC
  • RubyGems
    throttle-requests 1.0.0, 1.0.1
    MAL-2026-17570 amazon-inspector 1 IOC
  • RubyGems
    rate-limit-mini 1.0.0, 1.0.1
    MAL-2026-17567 amazon-inspector 1 IOC