Supply chain
Malicious packages · npm
Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.
Source: OpenSSF Malicious Packages via OSV.dev
223,320 reports · Feed
- npm
- npm
-
npm
conv-context-next 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.0.10MAL-2026-11965 ghsa-malware, amazon-inspector
- npm
- npm
- npm
- npm
-
npm
native-frontend-orb 1.1.4, 1.1.5, 1.1.6, 1.1.7, 1.1.8, 1.1.9, 1.1.10, 1.1.11, 1.1.12, 1.1.13, 1.1.1…MAL-2026-11976 ghsa-malware, amazon-inspector
- npm
-
npm
@ornikar/babel-preset-react 6.1.4, 6.1.5, 6.1.6, 6.1.7, 6.1.8, 6.1.9, 6.1.10, 6.1.11, 6.1.12, 6.1.13, 6.1.14MAL-2026-11742 ghsa-malware, amazon-inspector
-
npm
@ornikar/stylelint-config 14.0.3, 14.0.4, 14.0.5, 14.0.6, 14.0.7, 14.0.8, 14.0.9, 14.0.10, 14.0.11, 14.0.…MAL-2026-11778 ghsa-malware, amazon-inspector
-
npm
@ornikar/rollup-config 11.1.2, 11.1.3, 11.1.4, 11.1.5, 11.1.6, 11.1.7, 11.1.8, 11.1.9, 11.1.10, 11.1.1…MAL-2026-11774 ghsa-malware, amazon-inspector
-
npm
@ornikar/prettier-config 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9, 9.0.10, 9.0.11MAL-2026-11766 ghsa-malware, amazon-inspector
-
npm
@ornikar/jest-config-react-native-web 12.0.3, 12.0.4, 12.0.5, 12.0.6, 12.0.7, 12.0.8, 12.0.9, 12.0.10, 12.0.11, 12.0.…MAL-2026-11761 ghsa-malware, amazon-inspector
-
npm
@ornikar/repo-config 15.3.3, 15.3.4, 15.3.5, 15.3.6, 15.3.7, 15.3.8, 15.3.9, 15.3.10, 15.3.11, 15.3.…MAL-2026-11771 ghsa-malware, amazon-inspector
-
npm
@ornikar/jest-config 13.0.3, 13.0.4, 13.0.5, 13.0.6, 13.0.7, 13.0.8, 13.0.9, 13.0.10, 13.0.11, 13.0.…MAL-2026-11758 ghsa-malware, amazon-inspector
-
npm
@ornikar/eslint-plugin-ornikar 24.0.1, 24.0.2, 24.0.3, 24.0.4, 24.0.5, 24.0.6, 24.0.7, 24.0.8, 24.0.9, 24.0.10…MAL-2026-11755 ghsa-malware, amazon-inspector
-
npm
@ornikar/babel-preset-base 6.0.3, 6.0.4, 6.0.5, 6.0.6, 6.0.7, 6.0.8, 6.0.9, 6.0.10, 6.0.11, 6.0.12, 6.0.13…MAL-2026-11740 ghsa-malware, amazon-inspector
-
npm
@ornikar/renovate-config 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9, 9.0.10, 9.0.11, 9.0.12,…MAL-2026-11770 ghsa-malware, amazon-inspector
-
npm
@ornikar/eslint-config-typescript-react 24.0.1, 24.0.2, 24.0.3, 24.0.4, 24.0.5, 24.0.6, 24.0.7, 24.0.8, 24.0.9, 24.0.10…MAL-2026-11753 ghsa-malware, amazon-inspector
-
npm
frontend-orb 4.4.1, 4.4.2, 4.4.3, 4.4.4, 4.4.5, 4.4.6, 4.4.7, 4.4.8, 4.4.9, 4.4.10, 4.4.11, …MAL-2026-11973 ghsa-malware, amazon-inspector
-
npm
@ornikar/repo-config-react 13.0.8, 13.0.9, 13.0.10, 13.0.11, 13.0.12, 13.0.13, 13.0.14, 13.0.15, 13.0.16, …MAL-2026-11772 ghsa-malware, amazon-inspector
-
npm
babel-plugin-linaria-css-to-undefined 0.3.1, 0.3.2, 0.3.3, 0.3.4, 0.3.5, 0.3.6, 0.3.7, 0.3.8, 0.3.9, 0.3.10, 0.3.11, …MAL-2026-11962 ghsa-malware, amazon-inspector
-
npm
@ornikar/monorepo-config 14.3.2, 14.3.3, 14.3.4, 14.3.5, 14.3.6, 14.3.7, 14.3.8, 14.3.9, 14.3.10, 14.3.1…MAL-2026-11764 ghsa-malware, amazon-inspector
-
npm
@ornikar/repo-config-react-legacy-css 15.1.2, 15.1.3, 15.1.4, 15.1.5, 15.1.6, 15.1.7, 15.1.8, 15.1.9, 15.1.10, 15.1.1…MAL-2026-11773 ghsa-malware, amazon-inspector
-
npm
@ornikar/jest-config-react 18.0.2, 18.0.3, 18.0.4, 18.0.5, 18.0.6, 18.0.7, 18.0.8, 18.0.9, 18.0.10, 18.0.11MAL-2026-11759 ghsa-malware, amazon-inspector
-
npm
@ornikar/jest-config-react-native 17.0.2, 17.0.3, 17.0.4, 17.0.5, 17.0.6, 17.0.7, 17.0.8, 17.0.9, 17.0.10, 17.0.1…MAL-2026-11760 ghsa-malware, amazon-inspector
-
npm
@ornikar/kitt2 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.0.10, 1.0.11MAL-2026-11762 ghsa-malware, amazon-inspector
-
npm
@ornikar/rollup-plugin-postcss 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.…MAL-2026-11775 ghsa-malware, amazon-inspector
-
npm
@ornikar/typed-css-modules-loader 0.8.2, 0.8.3, 0.8.4, 0.8.5, 0.8.6, 0.8.7, 0.8.8, 0.8.9, 0.8.10, 0.8.11, 0.8.12MAL-2026-11779 ghsa-malware, amazon-inspector
-
npm
@ornikar/lerna-config 11.0.1, 11.0.2, 11.0.3, 11.0.4, 11.0.5, 11.0.6, 11.0.7, 11.0.8, 11.0.9, 11.0.10…MAL-2026-11763 ghsa-malware, amazon-inspector
-
npm
@ornikar/slate-react-fork 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.0.10, 1.0.11MAL-2026-11776 ghsa-malware, amazon-inspector
-
npm
@ornikar/react-modern-calendar-datepicker 3.2.1, 3.2.2, 3.2.3, 3.2.4, 3.2.5, 3.2.6, 3.2.7, 3.2.8, 3.2.9, 3.2.10, 3.2.11MAL-2026-11768 ghsa-malware, amazon-inspector
-
npm
@ornikar/eslint-config-node 12.2.1, 12.2.2, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7, 12.2.8, 12.2.9, 12.2.10MAL-2026-11749 ghsa-malware, amazon-inspector
-
npm
@ornikar/apollo-link-timeout 1.4.2, 1.4.3, 1.4.4, 1.4.5, 1.4.6, 1.4.7, 1.4.8, 1.4.9, 1.4.10, 1.4.11MAL-2026-11739 ghsa-malware, amazon-inspector
-
npm
@ornikar/react-native-svg-transformer 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.0.10, 1.0.11, 1.0.12, 1.0.13MAL-2026-11769 ghsa-malware, amazon-inspector
-
npm
@ornikar/webpack-config 12.0.2, 12.0.3, 12.0.4, 12.0.5, 12.0.6, 12.0.7, 12.0.8, 12.0.9, 12.0.10, 12.0.1…MAL-2026-11780 ghsa-malware, amazon-inspector
-
npm
@ornikar/eslint-config-formatjs 24.0.1, 24.0.2, 24.0.3, 24.0.4, 24.0.5, 24.0.6, 24.0.7, 24.0.8, 24.0.9, 24.0.10MAL-2026-11748 ghsa-malware, amazon-inspector
-
npm
@ornikar/babel-preset-kitt-universal 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8, 8.0.9, 8.0.10, 8.0.11, 8.0.12MAL-2026-11741 ghsa-malware, amazon-inspector
-
npm
pob-test-typescript-package-in-monorepo 4.2.1, 4.2.2, 4.2.3, 4.2.4, 4.2.5, 4.2.6, 4.2.7, 4.2.8, 4.2.9, 4.2.10, 4.2.11, …MAL-2026-11981 ghsa-malware, amazon-inspector