Supply chain

Malicious packages · npm

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,151 npm 223,981 PyPI 12,020 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

223,981 reports · Feed

npm
@servicetitan/titan-chatbot-ui-cypress 9.0.1, 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7
MAL-2026-11943 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/titan-chatbot-client 2.1.3, 2.1.4, 2.1.5, 2.1.6, 2.1.7, 2.1.8, 2.1.9
MAL-2026-11940 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/titan-chat-ui-anvil2 9.0.1, 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7
MAL-2026-11936 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/temporal-lite 3.4.1, 3.4.2, 3.4.3, 3.4.4, 3.4.5, 3.4.6, 3.4.7
MAL-2026-11931 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/microfront-tests 0.0.11, 0.0.12, 0.0.13, 0.0.14, 0.0.15, 0.0.16, 0.0.17
MAL-2026-11903 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/time-zones 3.8.1, 3.8.2, 3.8.3, 3.8.4, 3.8.5, 3.8.6, 3.8.7
MAL-2026-11934 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/modularpayments-webfields 1.0.53, 1.0.54, 1.0.55, 1.0.56, 1.0.57, 1.0.58, 1.0.59
MAL-2026-11905 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/cp-react-hooks 1.115.1, 1.115.2, 1.115.3, 1.115.4, 1.115.5, 1.115.6, 1.115.7
MAL-2026-11846 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/admin-layout 2.4.3, 2.4.4, 2.4.5, 2.4.6, 2.4.7, 2.4.8, 2.4.9
MAL-2026-11812 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/marketing-direct-mail-components 20.1.1, 20.1.2, 20.1.3, 20.1.4, 20.1.5, 20.1.6, 20.1.7
MAL-2026-11890 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/marketing-ui 9.3.1, 9.3.2, 9.3.3, 9.3.4, 9.3.5, 9.3.6, 9.3.7
MAL-2026-11896 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/eslint-plugin-processors-stub 12.8.15, 12.8.16, 12.8.17, 12.8.18, 12.8.19, 12.8.20, 12.8.21
MAL-2026-11865 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/cp-mfe 1.115.1, 1.115.2, 1.115.3, 1.115.4, 1.115.5, 1.115.6, 1.115.7
MAL-2026-11844 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/startup 38.1.1, 38.1.2, 38.1.3, 38.1.4, 38.1.5, 38.1.6, 38.1.7
MAL-2026-11923 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/lazy-module 38.1.1, 38.1.2, 38.1.3, 38.1.4, 38.1.5, 38.1.6, 38.1.7
MAL-2026-11885 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/cp-mfe-dev 1.115.1, 1.115.2, 1.115.3, 1.115.4, 1.115.5, 1.115.6, 1.115.7
MAL-2026-11845 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/admin-sql-table 1.0.14, 1.0.15, 1.0.16, 1.0.17, 1.0.18, 1.0.19, 1.0.20
MAL-2026-11813 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/anvil2-ext-common 0.7.1, 0.7.2, 0.7.3, 0.7.4, 0.7.5, 0.7.6, 0.7.7
MAL-2026-11826 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/link-item 41.3.1, 41.3.2, 41.3.3, 41.3.4, 41.3.5, 41.3.6, 41.3.7
MAL-2026-11888 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/notifications 41.3.1, 41.3.2, 41.3.3, 41.3.4, 41.3.5, 41.3.6, 41.3.7
MAL-2026-11909 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/ko-bridge 38.1.1, 38.1.2, 38.1.3, 38.1.4, 38.1.5, 38.1.6, 38.1.7
MAL-2026-11883 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/mfe-quick-actions 0.5.49, 0.5.50, 0.5.51, 0.5.52, 0.5.53, 0.5.54, 0.5.55
MAL-2026-11899 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/carto-charts-react 0.0.2, 0.0.3, 0.0.4, 0.0.5, 0.0.6, 0.0.7, 0.0.8
MAL-2026-11833 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/ajax-handlers 38.1.1, 38.1.2, 38.1.3, 38.1.4, 38.1.5, 38.1.6, 38.1.7
MAL-2026-11814 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
eslint-plugin-folder-schema 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.0.10, 1.0.11, 1.0.12, 1.0.13, 1.0.14, 1.0.15, 1.0…
MAL-2026-11968 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/titan-chat-ui-cypress 2.1.3, 2.1.4, 2.1.5, 2.1.6, 2.1.7, 2.1.8, 2.1.9
MAL-2026-11938 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/thoughtspot-theme 1.7.1, 1.7.2, 1.7.3, 1.7.4, 1.7.5, 1.7.6, 1.7.7
MAL-2026-11933 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/schema-comparison 0.1.3, 0.1.4, 0.1.5, 0.1.6, 0.1.7, 0.1.8, 0.1.9
MAL-2026-11916 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/carto-charts-core 0.0.2, 0.0.3, 0.0.4, 0.0.5, 0.0.6, 0.0.7, 0.0.8
MAL-2026-11832 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@or-sdk/tables 0.28.5, 0.28.6, 0.28.7
MAL-2026-11731 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@or-sdk/users 3.8.1, 3.8.2, 3.8.3
MAL-2026-11735 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/eslint-plugin-decorators-declare 12.8.15, 12.8.16, 12.8.17, 12.8.18, 12.8.19, 12.8.20, 12.8.21
MAL-2026-11862 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/anvil2-ext-charts 0.2.4, 0.2.5, 0.2.6, 0.2.7, 0.2.8, 0.2.9, 0.2.10
MAL-2026-11825 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/widget-platform 5.6.1, 5.6.2, 5.6.3, 5.6.4, 5.6.5, 5.6.6, 5.6.7
MAL-2026-11950 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/assist-utils 1.1.2, 1.1.3, 1.1.4, 1.1.5, 1.1.6, 1.1.7, 1.1.8
MAL-2026-11831 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/acquisition-functions 5.22.1, 5.22.2, 5.22.3, 5.22.4, 5.22.5, 5.22.6, 5.22.7
MAL-2026-11811 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/help-center 1.0.8, 1.0.9, 1.0.10, 1.0.11, 1.0.12, 1.0.13, 1.0.14
MAL-2026-11877 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/contentful 0.0.3, 0.0.4, 0.0.5, 0.0.6, 0.0.7, 0.0.8, 0.0.9
MAL-2026-11841 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/anvil2-ext-mwv 0.0.5, 0.0.6, 0.0.7, 0.0.8, 0.0.9, 0.0.10, 0.0.11
MAL-2026-11827 ghsa-malware, amazon-inspector

Aug 4, 2026
npm
@servicetitan/widget-platform-monolith 5.6.1, 5.6.2, 5.6.3, 5.6.4, 5.6.5, 5.6.6, 5.6.7
MAL-2026-11951 ghsa-malware, amazon-inspector

Aug 4, 2026