Supply chain

Malicious packages · npm

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,406 npm 223,265 PyPI 11,995 RubyGems 4,318 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

223,265 reports · Feed

npm
@risaoffc/baileys 8.0.0, 8.0.1, 8.0.2, 8.0.3
MAL-2026-18884 2 IOCs

Oct 27, 2026
npm
@shinzepelly/wabaileys 2.0.3
MAL-2026-18897

Oct 27, 2026
npm
@randev404/baileys 1.0.0
MAL-2026-18878

Oct 27, 2026
npm
@rahadi01/baileys 3.0.1, 3.0.2, 3.0.3
MAL-2026-18876

Oct 27, 2026
npm
@pinaapalerie/baileys 6.0.6
MAL-2026-18872

Oct 27, 2026
npm
@sarayun/baileys 7.0.1
MAL-2026-18895

Oct 27, 2026
npm
@shithsu/baileys-mod 8.0.6, 8.0.7
MAL-2026-18898 2 IOCs

Oct 27, 2026
npm
@poucode/baileys 1.0.0
MAL-2026-18873

Oct 27, 2026
npm
@sanz-0fx/baileys-mod 1.0.3-beta
MAL-2026-18891

Oct 27, 2026
npm
@purpleiriss/irisbail 2.0.3, 2.0.4
MAL-2026-18875

Oct 27, 2026
npm
@pahinak/bails 1.1.1
MAL-2026-18871

Oct 27, 2026
npm
@sanzsayangvien/baileys-pro 2.0.4
MAL-2026-18893

Oct 27, 2026
npm
@rexzlys/wbails 1.0.0
MAL-2026-18883

Oct 27, 2026
npm
@ranstech/bails 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.1.5, 1.1.6, 2.0.0
MAL-2026-18880

Oct 27, 2026
npm
@rizzkezik/baileys 1.1.1
MAL-2026-18887

Oct 27, 2026
npm
@riyanofficial/baileys-pro 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7
MAL-2026-18886 2 IOCs

Oct 27, 2026
npm
@sanndestroyer/baileys 2.0.3
MAL-2026-18890 2 IOCs

Oct 27, 2026
npm
@ravliesh/baileys 1.0.1, 1.0.2
MAL-2026-18881 2 IOCs

Oct 27, 2026
npm
@shurainc/baileys 3.0.2, 3.0.3
MAL-2026-18899

Oct 27, 2026
npm
@sapp1/baileys-pro 1.0.1
MAL-2026-18894

Oct 27, 2026
npm
@rakku-kun/baileys 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.2, 2.0.22, 2.0.23, 2.0.24, …
MAL-2026-18877

Oct 27, 2026
npm
@riyanofficial/baileys 10.0.0, 3.0.0, 3.0.1, 3.0.2, 4.0.0, 8.0.0, 8.4.12
MAL-2026-18885 2 IOCs

Oct 27, 2026
npm
@pahinak/baileys 6.1.0
MAL-2026-18870

Oct 27, 2026
npm
@revinza/baileys 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.3, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9
MAL-2026-18882

Oct 27, 2026
npm
@zlynzee/baileys 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6
MAL-2026-18928

Oct 27, 2026
npm
@ranstech/baileys 6.1.0
MAL-2026-18879

Oct 27, 2026
npm
@primeroselotus/baileys 6.0.0
MAL-2026-18874 2 IOCs

Oct 27, 2026
npm
@yonzxofficiall/baileys 9.0.0, 9.0.1
MAL-2026-18920 2 IOCs

Oct 27, 2026
npm
@zeppeliorg/xzcbailz 1.0.0, 1.0.1, 1.0.2
MAL-2026-18926

Oct 27, 2026
npm
alip-baileys 1.0.0, 1.0.1, 1.0.2, 1.0.3
MAL-2026-18929 2 IOCs

Oct 27, 2026
npm
@zeppeliorg/wbails 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.7-beta, 1.0.8, 1.0.…
MAL-2026-18925

Oct 27, 2026
npm
arkaan-amane-baileys 8.7.10
MAL-2026-18936

Oct 27, 2026
npm
baileys-new-dtz 1.0.0, 1.0.1
MAL-2026-18943

Oct 27, 2026
npm
angularsockets 1.4.5
MAL-2026-18935

Oct 27, 2026
npm
astrabail 1.0.10, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.1.0, 1.1.1, 1.1.2, 1.1.3, 1.1.6, 1.2.0, 1…
MAL-2026-18937

Oct 27, 2026
npm
alisaaai-baileys 1.0.6
MAL-2026-18930

Oct 27, 2026
npm
amanexfujimiya-baileys 8.6.22, 8.6.23, 8.6.24, 8.6.25, 8.6.26
MAL-2026-18933

Oct 27, 2026
npm
baileys-multidev 8.0.2
MAL-2026-18942 2 IOCs

Oct 27, 2026
npm
baileys-mood 0.5.0, 0.5.1
MAL-2026-18941

Oct 27, 2026
npm
baileys-p 6.7.19, 6.7.20, 6.7.21, 6.7.22, 6.7.23, 6.7.24, 6.8.0
MAL-2026-18944

Oct 27, 2026