Skip to content
OpenAdvisories

Supply chain

Malicious packages · RubyGems

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,465 npm 223,299 PyPI 12,017 RubyGems 4,319 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

4,319 reports · Feed

  • RubyGems
    bundelr 0.0.1, 1.0.81442
    MAL-2026-16916 reversing-labs
  • RubyGems
    bundelf 1.0.0, 1.0.17362
    MAL-2026-16915 reversing-labs
  • RubyGems
    bundeler 1.0.0, 1.0.77245
    MAL-2026-16914 reversing-labs
  • RubyGems
    bundelef 1.0.0, 1.0.14274
    MAL-2026-16913 reversing-labs
  • RubyGems
    bundef 1.0.0, 1.0.78938
    MAL-2026-16912 reversing-labs
  • RubyGems
    bundeer 1.0.0, 1.0.17600
    MAL-2026-16911 reversing-labs
  • RubyGems
    bundeef 1.0.0, 1.0.71470
    MAL-2026-16910 reversing-labs
  • RubyGems
    bunddler 1.0.0, 1.0.45929
    MAL-2026-16909 reversing-labs
  • RubyGems
    bunddlef 1.0.0, 1.0.12649
    MAL-2026-16908 reversing-labs
  • RubyGems
    bundaler 1.0.0, 1.0.97385
    MAL-2026-16907 reversing-labs
  • RubyGems
    bundalef 1.0.0, 1.0.54597
    MAL-2026-16906 reversing-labs
  • RubyGems
    bundaer 1.0.0, 1.0.92631
    MAL-2026-16905 reversing-labs
  • RubyGems
    bundaef 1.0.0, 1.0.64189
    MAL-2026-16904 reversing-labs
  • RubyGems
    buncler 1.0.0, 1.0.33420
    MAL-2026-16903 reversing-labs
  • RubyGems
    bunclef 1.0.0, 1.0.55168
    MAL-2026-16902 reversing-labs
  • RubyGems
    bunaler 1.0.0, 1.0.66996
    MAL-2026-16901 reversing-labs
  • RubyGems
    bunalef 1.0.0, 1.0.77903
    MAL-2026-16900 reversing-labs
  • RubyGems
    bunalder 1.0.0, 1.0.30181
    MAL-2026-16899 reversing-labs
  • RubyGems
    bunadler 1.0.0, 1.0.17618
    MAL-2026-16898 reversing-labs
  • RubyGems
    bunadlef 1.0.0, 1.0.95479
    MAL-2026-16897 reversing-labs
  • RubyGems
    bunader 1.0.0, 1.0.83765
    MAL-2026-16896 reversing-labs
  • RubyGems
    bumxler 1.0.0, 1.0.49666
    MAL-2026-16895 reversing-labs
  • RubyGems
    bumuler 1.0.0, 1.0.41410
    MAL-2026-16894 reversing-labs
  • RubyGems
    bumsler 1.0.0, 1.0.79291
    MAL-2026-16893 reversing-labs
  • RubyGems
    bumsdler 1.0.0, 1.0.96106
    MAL-2026-16892 reversing-labs
  • RubyGems
    bumrler 1.0.0, 1.0.57453
    MAL-2026-16891 reversing-labs
  • RubyGems
    bumrdler 1.0.0, 1.0.30940
    MAL-2026-16890 reversing-labs
  • RubyGems
    bumoler 1.0.0, 1.0.72706
    MAL-2026-16889 reversing-labs
  • RubyGems
    bumodler 1.0.0, 1.0.36008
    MAL-2026-16888 reversing-labs
  • RubyGems
    bumndler 1.0.0, 1.0.17427
    MAL-2026-16887 reversing-labs
  • RubyGems
    bummdler 1.0.0, 1.0.74928
    MAL-2026-16886 reversing-labs
  • RubyGems
    bumler 1.0.0, 1.0.60219
    MAL-2026-16885 reversing-labs
  • RubyGems
    bumldler 1.0.0, 1.0.94213
    MAL-2026-16884 reversing-labs
  • RubyGems
    bumlder 1.0.0, 1.0.46137
    MAL-2026-16883 reversing-labs
  • RubyGems
    bumiler 1.0.0, 1.0.31193
    MAL-2026-16882 reversing-labs
  • RubyGems
    bumidler 1.0.0, 1.0.64617
    MAL-2026-16881 reversing-labs
  • RubyGems
    bumfler 1.0.0, 1.0.22213
    MAL-2026-16880 reversing-labs
  • RubyGems
    bumeler 1.0.0, 1.0.75379
    MAL-2026-16879 reversing-labs
  • RubyGems
    bumedler 1.0.0, 1.0.68736
    MAL-2026-16878 reversing-labs
  • RubyGems
    bumduer 1.0.0, 1.0.5701
    MAL-2026-16877 reversing-labs