Supply chain

Malicious packages · RubyGems

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,171 npm 223,993 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

4,320 reports · Feed

RubyGems
gitlab-orchestrator 99.99.9, 99.99.10
MAL-2026-2814 reversing-labs

Apr 16, 2026
RubyGems
monolith-twirp-codingagentintegrations-codingagentintegrations 1.0.2
MAL-2026-2265 ossf-package-analysis

Mar 27, 2026
RubyGems
monolith-twirp-copilot-registry 1.0.6
MAL-2026-2266 ossf-package-analysis

Mar 27, 2026
RubyGems
monolith-twirp-partitioning-pull_requests 1.0.2
MAL-2026-2267 ossf-package-analysis

Mar 27, 2026
RubyGems
monolith-twirp-reposinsights-reposinsights 1.0.2
MAL-2026-2263 ossf-package-analysis

Mar 27, 2026
RubyGems
monolith-twirp-pullsd-teams 1.1.1
MAL-2026-2262 ossf-package-analysis

Mar 27, 2026
RubyGems
monolith-twirp-loops-core 1.0.2
MAL-2026-2259 ossf-package-analysis

Mar 27, 2026
RubyGems
monolith-twirp-pullsd-repositories 1.0.10
MAL-2026-2261 ossf-package-analysis

Mar 27, 2026
RubyGems
monolith-twirp-pullsd-pullrequestinfo 1.0.1
MAL-2026-2260 ossf-package-analysis

Mar 27, 2026
RubyGems
monolith-twirp-scribe-scribe 1.0.6
MAL-2026-2264 ossf-package-analysis

Mar 27, 2026
RubyGems
plugin-gem-example 99.99.99, 100.9.9
MAL-2026-2402 reversing-labs

Mar 24, 2026
RubyGems
testcatplzignore 0.0.1
MAL-2026-1924 reversing-labs

Mar 18, 2026
RubyGems
sq-minimal-feature-flags 13.6.2
MAL-2026-1923 reversing-labs

Mar 18, 2026
RubyGems
rubylogger 99.9.2, 99.9.3, 99.9.8, 99.9.9
MAL-2026-1922 reversing-labs

Mar 18, 2026
RubyGems
resolvrtest 0.0.3
MAL-2026-1921 reversing-labs

Mar 18, 2026
RubyGems
rails_structured_logging 0.0.4, 0.1.1, 0.1.2, 0.2.1, 1.0.2, 1.0.0, 1.0.1
MAL-2026-1920 reversing-labs

Mar 18, 2026
RubyGems
rafka-rb 5000.1.0
MAL-2026-1919 reversing-labs

Mar 18, 2026
RubyGems
newlogger 99.9.1, 99.9.2
MAL-2026-1918 reversing-labs

Mar 18, 2026
RubyGems
kaleido 5000.1.0
MAL-2026-1917 reversing-labs

Mar 18, 2026
RubyGems
freshworks-ruby 0.1.0
MAL-2026-1916 reversing-labs

Mar 18, 2026
RubyGems
doctolib 99.0.0, 99.0.1, 99.0.2, 99.0.3, 99.0.4
MAL-2026-1915 reversing-labs

Mar 18, 2026
RubyGems
newrubylogger 99.9.1
MAL-2026-1002 ossf-package-analysis

Feb 23, 2026
RubyGems
rubocop-vintedmetrics 9.9.9, 9.9.12
MAL-2026-996 ossf-package-analysis

Feb 20, 2026
RubyGems
cucumber_json_schema 90002.0
MAL-2026-906 ossf-package-analysis

Feb 15, 2026
RubyGems
verificator 0.0.2
MAL-2025-192925 reversing-labs

Dec 23, 2025
RubyGems
u2f_client 0.2
MAL-2025-192924 reversing-labs

Dec 23, 2025
RubyGems
test_gem_978483406ebb19126a2e8c001649a4eb 1.0.0
MAL-2025-192923 reversing-labs

Dec 23, 2025
RubyGems
stripe-server 0.2.15
MAL-2025-192922 reversing-labs

Dec 23, 2025
RubyGems
stripe-rubocop 0.11.3
MAL-2025-192921 reversing-labs

Dec 23, 2025
RubyGems
stripe-backup 0.0.0
MAL-2025-192920 reversing-labs

Dec 23, 2025
RubyGems
sq-samsa 12.3.1
MAL-2025-192919 reversing-labs

Dec 23, 2025
RubyGems
sq-mdc 9.11.23
MAL-2025-192918 reversing-labs

Dec 23, 2025
RubyGems
space-commander 1.0.4
MAL-2025-192917 reversing-labs

Dec 23, 2025
RubyGems
redis_connectable 90002.0
MAL-2025-192916 reversing-labs

Dec 23, 2025
RubyGems
rails-structured-logging 90002.0
MAL-2025-192915 reversing-labs

Dec 23, 2025
RubyGems
queenbee-plugin 90002.0, 99.0.7, 99.0.6, 99.0.4, 99.0.1, 99.0.0, 99.0.3, 99.0.5, 99.0.8
MAL-2025-192914 reversing-labs, ossf-package-analysis

Dec 23, 2025
RubyGems
prometheus_gcstat 0.0.900, 0.1.900, 0.900.0, 1.900, 9002.0
MAL-2025-192913 reversing-labs

Dec 23, 2025
RubyGems
prometheus_client_ruby 0.0.900, 0.1.900, 0.900.0, 1.900, 9002.0
MAL-2025-192912 reversing-labs

Dec 23, 2025
RubyGems
md_confluence 5.0.1
MAL-2025-192911 reversing-labs

Dec 23, 2025
RubyGems
macklemore 1.0.1
MAL-2025-192910 reversing-labs

Dec 23, 2025