Skip to content
OpenAdvisories

Supply chain

Malicious packages · RubyGems

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,171 npm 223,993 PyPI 12,028 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

4,320 reports · Feed

  • RubyGems
    wurl-aws-s3 0.3.1
    MAL-2024-7047 reversing-labs
  • RubyGems
    workarea-gift-cards 4.0.1
    MAL-2024-7046 reversing-labs
  • RubyGems
    wordify-stuckiest 1.1.0
    MAL-2024-7045 reversing-labs
  • RubyGems
    vagrant_hvinfo 0.1.3
    MAL-2024-7044 reversing-labs
  • RubyGems
    vacuole 22.55.2
    MAL-2024-7043 reversing-labs
  • RubyGems
    twitter_vine 0.1.9
    MAL-2024-7042 reversing-labs
  • RubyGems
    twitter-cards 0.1.0
    MAL-2024-7041 reversing-labs
  • RubyGems
    telegram_bot-types 0.6.1
    MAL-2024-7039 reversing-labs
  • RubyGems
    telegram_bot-ruby 0.12.0
    MAL-2024-7038 reversing-labs
  • RubyGems
    telegram-notifications 0.0.1
    MAL-2024-7037 reversing-labs
  • RubyGems
    telegram-meetup_bot 0.3.0
    MAL-2024-7036 reversing-labs
  • RubyGems
    telegram-bot_ruby 0.1.7
    MAL-2024-7035 reversing-labs
  • RubyGems
    telegram-bot_middleware 0.3.2
    MAL-2024-7034 reversing-labs
  • RubyGems
    telegram-bot_api 0.1.0
    MAL-2024-7033 reversing-labs
  • RubyGems
    taxjar-bundler 23.55.0
    MAL-2024-7032 reversing-labs
  • RubyGems
    stuck-it_up 0.1.0
    MAL-2024-7031 reversing-labs
  • RubyGems
    spider_src 0.1.7
    MAL-2024-7030 reversing-labs
  • RubyGems
    spider_node 0.0.1
    MAL-2024-7029 reversing-labs
  • RubyGems
    spider_gazelle 3.2.0
    MAL-2024-7028 reversing-labs
  • RubyGems
    spider-monkey 0.0.11
    MAL-2024-7027 reversing-labs
  • RubyGems
    spider-html 0.1.9
    MAL-2024-7026 reversing-labs
  • RubyGems
    spider-bot 0.0.5
    MAL-2024-7025 reversing-labs
  • RubyGems
    speed-spider 0.0.2
    MAL-2024-7024 reversing-labs
  • RubyGems
    shopify-oor 0.2.0, 9003.0.0, 1.900.0, 0.1.5, 0.0.0.1, 0.900.0, 8.0.0
    MAL-2024-7023 reversing-labs
  • RubyGems
    selenium-spider 0.1.2
    MAL-2024-7022 reversing-labs
  • RubyGems
    seeing-is_believing 3.6.1
    MAL-2024-7021 reversing-labs
  • RubyGems
    secondhand_spider 0.0.1
    MAL-2024-7020 reversing-labs
  • RubyGems
    rubylove-playing-cards 0.0.1
    MAL-2024-7019 reversing-labs
  • RubyGems
    ruby-playing_cards 0.0.2
    MAL-2024-7018 reversing-labs
  • RubyGems
    ruboty_telegram 1.0.0
    MAL-2024-7017 reversing-labs
  • RubyGems
    rspec-candy 0.5.1
    MAL-2024-7016 reversing-labs
  • RubyGems
    royal-mail_scraper 1.0.1
    MAL-2024-7015 reversing-labs
  • RubyGems
    royal-mail_api 0.1.1
    MAL-2024-7014 reversing-labs
  • RubyGems
    rollbar-blanket 22.55.2
    MAL-2024-7013 reversing-labs
  • RubyGems
    resque-stuck_queue 0.5.2
    MAL-2024-7012 reversing-labs
  • RubyGems
    referral-candy 0.1.0
    MAL-2024-7011 reversing-labs
  • RubyGems
    rbi-central 0.0.2
    MAL-2024-7010 reversing-labs
  • RubyGems
    rate-beer 0.0.2
    MAL-2024-7009 reversing-labs
  • RubyGems
    rails_test-serving 0.1.4.2
    MAL-2024-7008 reversing-labs
  • RubyGems
    rack_envinspector 0.1
    MAL-2024-7007 reversing-labs