Supply chain

Malicious packages · Go

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,000 npm 222,874 PyPI 11,985 RubyGems 4,315 NuGet 782 crates.io 21 Go 20 Maven 2 Packagist 1

20 reports · Feed

Go
gogets.dev/btreex all versions
MAL-2026-17454 5 IOCs

Oct 2, 2026
Go
gocommunity.io/orderedbtree all versions
MAL-2026-17453 5 IOCs

Oct 2, 2026
Go
github.com/BufferZoneCorp/net-helper all versions
MAL-2026-3629 google-open-source-security 1 IOC

May 13, 2026
Go
github.com/BufferZoneCorp/log-core all versions
MAL-2026-3628 google-open-source-security 1 IOC

May 13, 2026
Go
github.com/BufferZoneCorp/grpc-client all versions
MAL-2026-3627 google-open-source-security 1 IOC

May 13, 2026
Go
github.com/BufferZoneCorp/go-weather-sdk all versions
MAL-2026-3626 google-open-source-security 1 IOC

May 13, 2026
Go
github.com/BufferZoneCorp/go-stdlog all versions
MAL-2026-3625 google-open-source-security 1 IOC

May 13, 2026
Go
github.com/BufferZoneCorp/go-stdlib-ext all versions
MAL-2026-3624 google-open-source-security 1 IOC

May 13, 2026
Go
github.com/BufferZoneCorp/go-retryablehttp all versions
MAL-2026-3623 google-open-source-security 1 IOC

May 13, 2026
Go
github.com/BufferZoneCorp/go-metrics-sdk all versions
MAL-2026-3622 google-open-source-security 1 IOC

May 13, 2026
Go
github.com/BufferZoneCorp/go-envconfig all versions
MAL-2026-3621 google-open-source-security 1 IOC

May 13, 2026
Go
github.com/BufferZoneCorp/config-loader all versions
MAL-2026-3620 google-open-source-security 1 IOC

May 13, 2026
Go
github.com/vainreboot/layout all versions
MAL-2025-2551 google-open-source-security

Mar 19, 2025
Go
github.com/utilizedsun/layout all versions
MAL-2025-2550 google-open-source-security

Mar 19, 2025
Go
github.com/thankfulmai/hypert all versions
MAL-2025-2549 google-open-source-security

Mar 19, 2025
Go
github.com/shallowmulti/hypert all versions
MAL-2025-2548 google-open-source-security

Mar 19, 2025
Go
github.com/shadowybulk/hypert all versions
MAL-2025-2547 google-open-source-security

Mar 19, 2025
Go
github.com/ornatedoctrin/layout all versions
MAL-2025-2546 google-open-source-security

Mar 19, 2025
Go
github.com/belatedplanet/hypert all versions
MAL-2025-2544 google-open-source-security

Mar 19, 2025
Go
github.com/boltdb-go/bolt all versions
MAL-2025-2545 google-open-source-security

Mar 19, 2025