Skip to content
OpenAdvisories

Supply chain

Malicious packages · npm

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,465 npm 223,299 PyPI 12,017 RubyGems 4,319 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

223,299 reports · Feed

  • npm
    bs58-11 6.0.1
    MAL-2026-13758 ghsa-malware, amazon-inspector
  • npm
    base65-13x 5.0.2
    MAL-2026-13747 amazon-inspector, ghsa-malware
  • npm
    base65-12x 5.0.2
    MAL-2026-13746 amazon-inspector, ghsa-malware
  • npm
    base65-11x 5.0.2
    MAL-2026-13745 amazon-inspector, ghsa-malware
  • npm
    dakumangalsingh_virus 1.3.0, 1.2.0, 1.0.0
    MAL-2026-13761 ghsa-malware, amazon-inspector
  • npm
    @nzeros/codebreak 1.3.0
    MAL-2026-13736 amazon-inspector
  • npm
    @openzeppelin-4/contracts 1.0.1, 1.0.0
    MAL-2026-13737 amazon-inspector 1 IOC
  • npm
    @openzeppelin-5/contracts 1.0.0, 1.0.1
    MAL-2026-13738 amazon-inspector 1 IOC
  • npm
    safe-local-env-loader 1.0.0
    MAL-2026-13741 amazon-inspector
  • npm
    kit-vim-map 1.0.0
    MAL-2026-13740 amazon-inspector, ghsa-malware
  • npm
    node-internal-svg-loader 1.0.1, 1.0.0
    MAL-2026-13766 ghsa-malware, amazon-inspector
  • npm
    developer-dashboard 1.0.2, 1.0.3
    MAL-2026-13762 ghsa-malware, amazon-inspector
  • npm
    newtun 1.0.20, 1.0.14, 1.0.18, 1.0.25, 1.0.12, 1.0.26, 1.0.21, 1.0.1, 1.0.13, 1.0.8, 1…
    MAL-2026-13733 amazon-inspector
  • npm
    ghazaly 99.9.0
    MAL-2026-13755 amazon-inspector, ghsa-malware
  • npm
    dependencyfsdsfdsfg 99.9.0
    MAL-2026-13754 amazon-inspector, ghsa-malware
  • npm
    fetch-runtime 1.5.0, 1.3.0, 1.2.0, 1.4.0
    MAL-2026-13763 ghsa-malware, amazon-inspector
  • npm
    lines-columns 1.2.4
    MAL-2026-13765 ghsa-malware, amazon-inspector
  • npm
    upshift-finance 1.0.0
    MAL-2026-13777 amazon-inspector 2 IOCs
  • npm
    upshift-config 0.5.14
    MAL-2026-13776 amazon-inspector 2 IOCs
  • npm
    permit2 1.0.1, 1.0.0
    MAL-2026-13775 amazon-inspector 1 IOC
  • npm
    augustdigital-sdk 8.20.1
    MAL-2026-13774 amazon-inspector 2 IOCs
  • npm
    camelot-ammv2-periphery 1.1.0, 1.1.1, 1.0.0
    MAL-2026-13773 amazon-inspector 1 IOC
  • npm
    camelot-ammv2-core 1.1.0, 1.1.1, 1.0.0
    MAL-2026-13772 amazon-inspector 1 IOC
  • npm
    boring-vault 1.1.1, 1.1.0, 1.0.0
    MAL-2026-13771 amazon-inspector 1 IOC
  • npm
    @telekom-ods/react-ui-kit 2.6.9, 2.6.0
    MAL-2026-13770 amazon-inspector 2 IOCs
  • npm
    ethereum-vault-connector 1.0.0, 1.1.0, 1.1.1
    MAL-2026-13739 amazon-inspector 1 IOC
  • npm
    @aerodrome-finance/slipstream 1.1.0, 1.1.1, 1.0.0
    MAL-2026-13735 amazon-inspector 1 IOC
  • npm
    @aerodrome-finance/contracts 1.1.0, 1.1.1, 1.0.0
    MAL-2026-13734 amazon-inspector 1 IOC
  • npm
    my-auto-follow 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.6, 1.0.7, 1.0.4, 1.0.5
    MAL-2026-13932 amazon-inspector, ghsa-malware 2 IOCs
  • npm
    @dreamguyxeon/libsignal-node 1.0.1, 1.0.3, 1.0.2, 1.0.4
    MAL-2026-13931 amazon-inspector, ghsa-malware 2 IOCs
  • npm
    @dreamguyxeon/baileyx 1.0.0, 2.0.0, 3.0.0, 4.0.0, 5.0.0
    MAL-2026-13930 amazon-inspector, ghsa-malware 2 IOCs
  • npm
    @dgxeon13/libsignal-node 1.0.0
    MAL-2026-13929 2 IOCs
  • npm
    @sqlite-labs/nodesql 1.0.7, 1.0.6, 1.0.3, 1.0.4, 1.0.5
    MAL-2026-13714 ghsa-malware, amazon-inspector
  • npm
    @sqlite-labs/createsql 1.0.5, 1.0.0, 1.0.4, 1.0.1, 1.0.2, 1.0.3
    MAL-2026-13713 ghsa-malware, amazon-inspector
  • npm
    spoint 0.1.700, 0.1.699, 0.1.698, 0.1.697, 0.1.696, 0.1.695
    MAL-2026-13725 ghsa-malware, amazon-inspector
  • npm
    svelte-kit-streak 1.0.0
    MAL-2026-13726 ghsa-malware, amazon-inspector
  • npm
    kit-map-streak all versions
    MAL-2026-13724 ghsa-malware
  • npm
    godot-kit 1.0.1786316795
    MAL-2026-13723 ghsa-malware, amazon-inspector
  • npm
    tailwind-elements-ui 1.0.1
    MAL-2026-13727 ghsa-malware, amazon-inspector
  • npm
    fsbrowse 0.2.28
    MAL-2026-13722 ghsa-malware, amazon-inspector