Skip to content
OpenAdvisories

Supply chain

Malicious packages · RubyGems

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,465 npm 223,299 PyPI 12,017 RubyGems 4,319 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

4,319 reports · Feed

  • RubyGems
    bundlelf 1.0.0, 1.0.4053
    MAL-2026-16956 reversing-labs
  • RubyGems
    bundleir 1.0.0, 1.0.23706
    MAL-2026-16955 reversing-labs
  • RubyGems
    bundleif 1.0.0, 1.0.19460
    MAL-2026-16954 reversing-labs
  • RubyGems
    bundlei 1.0.0, 1.0.61624
    MAL-2026-16953 reversing-labs
  • RubyGems
    bundleg 1.0.0, 1.0.45643
    MAL-2026-16952 reversing-labs
  • RubyGems
    bundlefs 1.0.0, 1.0.49656
    MAL-2026-16951 reversing-labs
  • RubyGems
    bundlefr 1.0.0, 1.0.72259
    MAL-2026-16950 reversing-labs
  • RubyGems
    bundlefo 1.0.0, 1.0.99406
    MAL-2026-16949 reversing-labs
  • RubyGems
    bundlefn 1.0.0, 1.0.64016
    MAL-2026-16948 reversing-labs
  • RubyGems
    bundlefl 1.0.0, 1.0.14431
    MAL-2026-16947 reversing-labs
  • RubyGems
    bundlefi 1.0.0, 1.0.90625
    MAL-2026-16946 reversing-labs
  • RubyGems
    bundleff 1.0.0, 1.0.26571
    MAL-2026-16945 reversing-labs
  • RubyGems
    bundlefe 1.0.0, 1.0.33577
    MAL-2026-16944 reversing-labs
  • RubyGems
    bundlefa 1.0.0, 1.0.70960
    MAL-2026-16943 reversing-labs
  • RubyGems
    bundlef-ruby 1.0.748
    MAL-2026-16942 reversing-labs
  • RubyGems
    bundlef-rb 1.0.37113
    MAL-2026-16941 reversing-labs
  • RubyGems
    bundlef-lib 1.0.48657
    MAL-2026-16940 reversing-labs
  • RubyGems
    bundlef-gem 1.0.21369
    MAL-2026-16939 reversing-labs
  • RubyGems
    bundlef 1.0.0, 1.0.58293
    MAL-2026-16938 reversing-labs
  • RubyGems
    bundleer 1.0.0, 1.0.40447
    MAL-2026-16937 reversing-labs
  • RubyGems
    bundleef 1.0.0, 1.0.31661
    MAL-2026-16936 reversing-labs
  • RubyGems
    bundlee 1.0.0, 1.0.88079
    MAL-2026-16935 reversing-labs
  • RubyGems
    bundled 1.0.0, 1.0.35762
    MAL-2026-16934 reversing-labs
  • RubyGems
    bundlec 1.0.0, 1.0.70665
    MAL-2026-16933 reversing-labs
  • RubyGems
    bundlear 1.0.0, 1.0.5380
    MAL-2026-16932 reversing-labs
  • RubyGems
    bundleaf 1.0.0, 1.0.47557
    MAL-2026-16931 reversing-labs
  • RubyGems
    bundlea 1.0.0, 1.0.12846
    MAL-2026-16930 reversing-labs
  • RubyGems
    bundldr 1.0.0, 1.0.36771
    MAL-2026-16929 reversing-labs
  • RubyGems
    bundldf 1.0.0, 1.0.6046
    MAL-2026-16928 reversing-labs
  • RubyGems
    bundlar 1.0.0, 1.0.32202
    MAL-2026-16927 reversing-labs
  • RubyGems
    bundlaf 1.0.0, 1.0.66618
    MAL-2026-16926 reversing-labs
  • RubyGems
    bundlaer 1.0.0, 1.0.56863
    MAL-2026-16925 reversing-labs
  • RubyGems
    bundlaef 1.0.0, 1.0.44794
    MAL-2026-16924 reversing-labs
  • RubyGems
    bundker 1.0.0, 1.0.51667
    MAL-2026-16923 reversing-labs
  • RubyGems
    bundkef 1.0.0, 1.0.40256
    MAL-2026-16922 reversing-labs
  • RubyGems
    bundiler 1.0.0, 1.0.11299
    MAL-2026-16921 reversing-labs
  • RubyGems
    bundilef 1.0.0, 1.0.5365
    MAL-2026-16920 reversing-labs
  • RubyGems
    bundier 1.0.0, 1.0.14195
    MAL-2026-16919 reversing-labs
  • RubyGems
    bundief 1.0.0, 1.0.97150
    MAL-2026-16918 reversing-labs
  • RubyGems
    bunder 1.0.0, 1.0.29686
    MAL-2026-16917 reversing-labs