Supply chain

Malicious packages · RubyGems

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,171 npm 223,993 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

4,320 reports · Feed

RubyGems
blackbird-client 99.99.99
MAL-2025-46897 ossf-package-analysis

Sep 1, 2025
RubyGems
authnd-client 99.99.99
MAL-2025-46894 ossf-package-analysis

Sep 1, 2025
RubyGems
driftwood-client 0.0.1.r1319997b9
MAL-2025-46905 ossf-package-analysis

Sep 1, 2025
RubyGems
aqueduct-client 1.3.3
MAL-2025-46893 ossf-package-analysis

Sep 1, 2025
RubyGems
feature-flags-client 1.1.0.4.g5ec4367
MAL-2025-46907 ossf-package-analysis

Sep 1, 2025
RubyGems
badge-ruler 0.0.2
MAL-2025-46895 ossf-package-analysis

Sep 1, 2025
RubyGems
diff-analysis 0.1.0.r8ff4356
MAL-2025-46904 ossf-package-analysis

Sep 1, 2025
RubyGems
dependency-graph-platform-proto 99.99.99
MAL-2025-46901 ossf-package-analysis

Sep 1, 2025
RubyGems
delorean_client 0.4.0.r09ee7b0
MAL-2025-46900 ossf-package-analysis

Sep 1, 2025
RubyGems
actions-broker 99.99.99
MAL-2025-46890 ossf-package-analysis

Sep 1, 2025
RubyGems
console_auth 99.99.99
MAL-2025-46899 ossf-package-analysis

Sep 1, 2025
RubyGems
egress 1.68.g52b0cd0
MAL-2025-46906 ossf-package-analysis

Sep 1, 2025
RubyGems
dependency-snapshots-api-proto 99.99.99
MAL-2025-46902 ossf-package-analysis

Sep 1, 2025
RubyGems
github-kredz 1.0.1.1135.gf4a4623f5
MAL-2025-46908 ossf-package-analysis

Sep 1, 2025
RubyGems
omniauth-pro-sante-connect 0.1.1, 0.1.2, 0.1.3, 0.1.4, 0.1.5, 0.1.6, 0.1.7, 0.1.8, 0.1.0
MAL-2025-41805 reversing-labs

Aug 28, 2025
RubyGems
webpack-dev-server 9.9.0, 9.9.1, 9.9.8, 9.9.9, 9.1.0
MAL-2025-6629 reversing-labs

Jul 31, 2025
RubyGems
maventa_utils 3.0.0, 4.0.0
MAL-2025-6628 reversing-labs

Jul 31, 2025
RubyGems
maventa_common 3.0.0, 4.0.0, 5.0.0
MAL-2025-6627 reversing-labs

Jul 31, 2025
RubyGems
icare 1.0.0
MAL-2025-6385 ossf-package-analysis

Jul 31, 2025
RubyGems
icaret 0.0.1
MAL-2025-6386 ossf-package-analysis

Jul 31, 2025
RubyGems
resource_registry 0.0.1, 1.0.22
MAL-2025-6348 ossf-package-analysis

Jul 30, 2025
RubyGems
message_gateway 0.0.1
MAL-2025-6265 ossf-package-analysis

Jul 27, 2025
RubyGems
xxxxxxxx 9.9.9
MAL-2025-5147 reversing-labs

Jun 18, 2025
RubyGems
teaspoon-devkit 0.1.0, 0.1.1
MAL-2025-5146 reversing-labs

Jun 18, 2025
RubyGems
jdbc-zzz 9.9.9
MAL-2025-5145 reversing-labs

Jun 18, 2025
RubyGems
bvr-api 0.3.12
MAL-2025-3295 ossf-package-analysis

Apr 24, 2025
RubyGems
evenote-thrift 1.25.8, 9.9.9, 10.0.0, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.0, 10.8.0
MAL-2025-3021 reversing-labs

Mar 28, 2025
RubyGems
poc-by-shahwar 0.1.0
MAL-2025-2209 ossf-package-analysis

Mar 6, 2025
RubyGems
poc-genrateed-by-noob 0.1.0
MAL-2025-2210 ossf-package-analysis

Mar 6, 2025
RubyGems
evil_gem 0.1.0
MAL-2025-2208 ossf-package-analysis

Mar 6, 2025
RubyGems
luno-cocoapods 2.8.0
MAL-2025-1555 ossf-package-analysis

Feb 25, 2025
RubyGems
komojuu 99.0.0
MAL-2025-1508 ossf-package-analysis

Feb 21, 2025
RubyGems
dextester 9.9.9
MAL-2025-1010 reversing-labs

Feb 3, 2025
RubyGems
haefgerasgrae 0.1.0
MAL-2024-11896 ossf-package-analysis

Dec 17, 2024
RubyGems
znowflake_client 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.1.5, 1.1.6, 1.1.7, 1.1.8, 1.1.9, 2.0.0, 2.1.0
MAL-2024-10224 reversing-labs

Oct 16, 2024
RubyGems
zen-ruby-linter 1.8.1
MAL-2024-10223 reversing-labs

Oct 16, 2024
RubyGems
zbt_element_definer 1.0.0, 1.0.8
MAL-2024-10222 reversing-labs

Oct 16, 2024
RubyGems
johnny_five 0.8.0, 0.9.4, 1.0.0, 1.0.9, 1.1.0, 1.1.0.1, 1.1.1, 1.2.0, 1.2.1, 1.98.0, 1.99.0…
MAL-2024-10221 reversing-labs

Oct 16, 2024
RubyGems
melio-platform-api-client 5.0.0, 3.0.1, 3.1.1, 3.1.2, 3.1.4, 4.4.4, 4.4.5, 4.4.6, 5.0.1
MAL-2024-7834 ossf-package-analysis, reversing-labs

Jul 28, 2024
RubyGems
prnigtest 1.0
MAL-2024-7824 ossf-package-analysis

Jul 27, 2024