Supply chain

Malicious packages · npm

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,465 npm 223,299 PyPI 12,017 RubyGems 4,319 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

223,299 reports · Feed

npm
@assetshop/verify-cli 99.0.1, 99.0.0
MAL-2026-13881 amazon-inspector

Aug 12, 2026
npm
dakumangalsingh 1.0.1, 1.0.0, 1.1.0, 2.0.1, 1.2.0
MAL-2026-13879 amazon-inspector

Aug 12, 2026
npm
mcp-util-helpers 1.0.0
MAL-2026-13880 amazon-inspector

Aug 12, 2026
npm
@years17/n8n-nodes-helper-utils 1.0.2, 1.0.5, 1.0.1, 1.0.0, 1.0.6, 1.0.4, 1.0.3
MAL-2026-13869 amazon-inspector

Aug 12, 2026
npm
@years17/n8n-nodes-utils-helper-b 1.0.0
MAL-2026-13871 amazon-inspector

Aug 12, 2026
npm
@years17/n8n-nodes-utils-helper-c 1.0.0
MAL-2026-13872 amazon-inspector

Aug 12, 2026
npm
@years17/n8n-nodes-utils-helper 1.0.1, 1.0.0
MAL-2026-13870 amazon-inspector

Aug 12, 2026
npm
@years17/n8n-nodes-utils-helper-d 1.0.0
MAL-2026-13873 amazon-inspector

Aug 12, 2026
npm
@years17/n8n-nodes-utils-helper-g 1.0.0
MAL-2026-13876 amazon-inspector

Aug 12, 2026
npm
@years17/n8n-nodes-utils-helper-h 1.0.0
MAL-2026-13877 amazon-inspector

Aug 12, 2026
npm
@years17/n8n-nodes-utils-helper-i 1.0.0
MAL-2026-13878 amazon-inspector

Aug 12, 2026
npm
@years17/n8n-nodes-utils-helper-e 1.0.0
MAL-2026-13874 amazon-inspector

Aug 12, 2026
npm
@years17/n8n-nodes-utils-helper-f 1.0.0
MAL-2026-13875 amazon-inspector

Aug 12, 2026
npm
@years18/n8n-nodes-utils-helper-a 1.0.0
MAL-2026-13847 amazon-inspector

Aug 12, 2026
npm
@years18/n8n-nodes-utils-helper-b 1.0.0
MAL-2026-13848 amazon-inspector

Aug 12, 2026
npm
@years18/n8n-nodes-utils-helper-d 1.0.0
MAL-2026-13850 amazon-inspector

Aug 12, 2026
npm
@years18/n8n-nodes-utils-helper-e 1.0.0
MAL-2026-13851 amazon-inspector

Aug 12, 2026
npm
@years18/n8n-nodes-utils-helper-j 1.0.0
MAL-2026-13854 amazon-inspector

Aug 12, 2026
npm
@years18/n8n-nodes-utils-helper-f 1.0.0
MAL-2026-13852 amazon-inspector

Aug 12, 2026
npm
@years18/n8n-nodes-utils-helper-g 1.0.0
MAL-2026-13853 amazon-inspector

Aug 12, 2026
npm
@years18/n8n-nodes-utils-helper-l 1.0.0
MAL-2026-13856 amazon-inspector

Aug 12, 2026
npm
@years18/n8n-nodes-utils-helper-c 1.0.0
MAL-2026-13849 amazon-inspector

Aug 12, 2026
npm
@years18/n8n-nodes-utils-helper-k 1.0.0
MAL-2026-13855 amazon-inspector

Aug 12, 2026
npm
@years18/n8n-nodes-utils-helper-m 1.0.0
MAL-2026-13857 amazon-inspector

Aug 12, 2026
npm
@years18/n8n-nodes-utils-helper-n 1.0.0
MAL-2026-13858 amazon-inspector

Aug 12, 2026
npm
@years18/n8n-nodes-utils-helper-p 1.0.0
MAL-2026-13860 amazon-inspector

Aug 12, 2026
npm
@years18/n8n-nodes-utils-helper-o 1.0.0
MAL-2026-13859 amazon-inspector

Aug 12, 2026
npm
@years18/n8n-nodes-utils-helper-q 1.0.0
MAL-2026-13861 amazon-inspector

Aug 12, 2026
npm
@years18/n8n-nodes-utils-helper-r 1.0.0
MAL-2026-13862 amazon-inspector

Aug 12, 2026
npm
@years18/n8n-nodes-utils-helper-u 1.0.0
MAL-2026-13865 amazon-inspector

Aug 12, 2026
npm
@years18/n8n-nodes-utils-helper-s 1.0.0
MAL-2026-13863 amazon-inspector

Aug 12, 2026
npm
@years18/n8n-nodes-utils-helper-w 1.0.0
MAL-2026-13867 amazon-inspector

Aug 12, 2026
npm
@years18/n8n-nodes-utils-helper-t 1.0.0
MAL-2026-13864 amazon-inspector

Aug 12, 2026
npm
@years18/n8n-nodes-utils-helper-v 1.0.0
MAL-2026-13866 amazon-inspector

Aug 12, 2026
npm
@years18/n8n-nodes-utils-helper-x 1.0.0
MAL-2026-13868 amazon-inspector

Aug 12, 2026
npm
noxleys 1.1.6, 1.1.5, 1.1.4, 1.0.0, 1.1.1, 1.1.0, 1.1.3, 1.1.2
MAL-2026-13831 ghsa-malware, amazon-inspector

Aug 12, 2026
npm
kanyut 1.0.0
MAL-2026-13819 ghsa-malware, amazon-inspector

Aug 12, 2026
npm
@noxzacode/libsignal-node all versions
MAL-2026-13781 ghsa-malware

Aug 12, 2026
npm
@noxzacode/eslint-config all versions
MAL-2026-13780 ghsa-malware

Aug 12, 2026
npm
twcvhjlksdmx 1.0.1, 1.0.0
MAL-2026-13836 ghsa-malware, amazon-inspector

Aug 12, 2026