Supply chain

Malicious packages · npm

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,407 npm 223,265 PyPI 11,995 RubyGems 4,319 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

223,265 reports · Feed

npm
delkira-baileys 0.8.2
MAL-2026-18964

Oct 27, 2026
npm
fast-baileys 2.0.6, 2.0.7, 2.0.8, 2.0.9
MAL-2026-18971 2 IOCs

Oct 27, 2026
npm
flibu-baileys-official 1.1.1
MAL-2026-18974

Oct 27, 2026
npm
ctbaileys 1.0.13, 1.0.14, 1.0.5, 1.0.6, 1.0.7, 1.0.8
MAL-2026-18958

Oct 27, 2026
npm
felixid 1.1.1, 1.1.2
MAL-2026-18972

Oct 27, 2026
npm
devilkyuuna 1.0.11, 1.0.12, 1.0.13, 1.0.14
MAL-2026-18965

Oct 27, 2026
npm
byleeosbaileys 2.0.5
MAL-2026-18954

Oct 27, 2026
npm
finzzcloud 1.0.0
MAL-2026-18973

Oct 27, 2026
npm
dibosockets 1.0.2, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.1.0
MAL-2026-18966

Oct 27, 2026
npm
ell-bail 2.0.0
MAL-2026-18970

Oct 27, 2026
npm
gupongxyz 2.0.0
MAL-2026-18977 2 IOCs

Oct 27, 2026
npm
hunter-baileys 2.1.1
MAL-2026-18980 2 IOCs

Oct 27, 2026
npm
gifted-baileys 2.0.5, 2.0.6, 2.5.7, 2.5.8
MAL-2026-18976 2 IOCs

Oct 27, 2026
npm
kazumarii-kyuuna 1.0.23, 1.0.24
MAL-2026-18982

Oct 27, 2026
npm
itssofc 1.2.13
MAL-2026-18981 2 IOCs

Oct 27, 2026
npm
hiura 1.0.1
MAL-2026-18979 2 IOCs

Oct 27, 2026
npm
madara-baileys 1.0.0, 1.0.1
MAL-2026-18986

Oct 27, 2026
npm
malvin-baileys 2.2.0, 2.2.1, 2.2.2, 2.2.3, 2.2.4, 2.2.5
MAL-2026-18988 2 IOCs

Oct 27, 2026
npm
nobiztoblut-bot 1.2.3, 1.2.4
MAL-2026-18995

Oct 27, 2026
npm
phantom-pro 0.0.5, 0.0.7, 1.0.0
MAL-2026-19001

Oct 27, 2026
npm
killua-baileys 2.0.0
MAL-2026-18983

Oct 27, 2026
npm
nrx-bails 0.0.1
MAL-2026-18997

Oct 27, 2026
npm
koezoet-new 1.0.0, 1.0.1
MAL-2026-18984

Oct 27, 2026
npm
mod-baileys 1.0.1, 1.0.2, 1.0.3, 2.0.0
MAL-2026-18991

Oct 27, 2026
npm
mybotthisoneis 1.0.0
MAL-2026-18994 2 IOCs

Oct 27, 2026
npm
shadowmd-baileys 8.6.49, 8.6.50, 8.6.51, 8.6.52, 8.6.54, 8.6.55, 8.6.56, 8.6.57, 8.6.59, 8.6.90,…
MAL-2026-19014

Oct 27, 2026
npm
vinzzknight 1.0.2, 1.0.3, 1.0.4
MAL-2026-19030 5 IOCs

Oct 27, 2026
npm
turbo-baileys 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5
MAL-2026-19022 6 IOCs

Oct 27, 2026
npm
vendetazuu-baileys 1.0.0
MAL-2026-19025

Oct 27, 2026
npm
rsembilaneks-baileys 2.0.4
MAL-2026-19010

Oct 27, 2026
npm
ryuubail 1.0.0
MAL-2026-19012

Oct 27, 2026
npm
ultramaxo-baileys 1.0.0
MAL-2026-19023

Oct 27, 2026
npm
mid-baileys 0.7.26, 0.7.27, 0.7.28, 0.7.29, 0.7.30
MAL-2026-18990 2 IOCs

Oct 27, 2026
npm
mrxd-baileys 1.0.0, 1.0.1, 1.0.2
MAL-2026-18992 4 IOCs

Oct 27, 2026
npm
habibih-bailys 7.3.2
MAL-2026-18978

Oct 27, 2026
npm
lilgabriel-baileys 2.5.10, 2.5.8, 2.5.9
MAL-2026-18985 2 IOCs

Oct 27, 2026
npm
popkid-baileys 1.0.2
MAL-2026-19002

Oct 27, 2026
npm
makamesco-baileys 1.0.0
MAL-2026-18987

Oct 27, 2026
npm
nyttt-baileys 1.0.1
MAL-2026-18998

Oct 27, 2026
npm
ms-nicky-baileys 2.0.3
MAL-2026-18993

Oct 27, 2026