Skip to content
OpenAdvisories

Supply chain

Malicious packages · npm

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,159 npm 223,989 PyPI 12,020 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

223,989 reports · Feed

  • npm
    react.ja all versions
    MAL-2026-11368 ghsa-malware
  • npm
    installreact all versions
    MAL-2026-11322 ghsa-malware
  • npm
    reakt.js all versions
    MAL-2026-11370 ghsa-malware
  • npm
    react.j all versions
    MAL-2026-11367 ghsa-malware
  • npm
    reac.js all versions
    MAL-2026-11364 ghsa-malware
  • npm
    express.jd all versions
    MAL-2026-11308 ghsa-malware
  • npm
    express.ja all versions
    MAL-2026-11307 ghsa-malware
  • npm
    expres.js all versions
    MAL-2026-11302 ghsa-malware
  • npm
    ekspress all versions
    MAL-2026-11288 ghsa-malware
  • npm
    chalk-helper all versions
    MAL-2026-11258 ghsa-malware
  • npm
    chalk-buttons all versions
    MAL-2026-11257 ghsa-malware
  • npm
    chalk-button all versions
    MAL-2026-11256 ghsa-malware
  • npm
    chalk-butons all versions
    MAL-2026-11255 ghsa-malware
  • npm
    uniswapintefrace all versions
    MAL-2026-11407 ghsa-malware
  • npm
    ttest3333 all versions
    MAL-2026-11405 ghsa-malware
  • npm
    ttest333 all versions
    MAL-2026-11404 ghsa-malware
  • npm
    testtwix all versions
    MAL-2026-11398 ghsa-malware
  • npm
    raydiums all versions
    MAL-2026-11363 ghsa-malware
  • npm
    clotest all versions
    MAL-2026-11263 ghsa-malware
  • npm
    clo321-server all versions
    MAL-2026-11262 ghsa-malware
  • npm
    clo321 all versions
    MAL-2026-11261 ghsa-malware
  • npm
    clo2 all versions
    MAL-2026-11260 ghsa-malware
  • npm
    clo-adspect all versions
    MAL-2026-11259 ghsa-malware
  • npm
    apijsclo all versions
    MAL-2026-11239 ghsa-malware
  • npm
    1apijs all versions
    MAL-2026-11206 ghsa-malware
  • npm
    tgnode all versions
    MAL-2026-11399 ghsa-malware
  • npm
    base58-ts all versions
    MAL-2026-11247 ghsa-malware
  • npm
    base-x-ts all versions
    MAL-2026-11246 ghsa-malware
  • npm
    node-logger-winston all versions
    MAL-2026-11341 ghsa-malware
  • npm
    dash-merge all versions
    MAL-2026-11274 ghsa-malware
  • npm
    @grua/icons 99.0.0
    MAL-2026-11214 ghsa-malware, reversing-labs
  • npm
    @grua/core all versions
    MAL-2026-11213 ghsa-malware
  • npm
    isix all versions
    MAL-2026-11323 ghsa-malware
  • npm
    @solana-sdk/web3.js all versions
    MAL-2026-11227 ghsa-malware
  • npm
    @ethers-sdk/wallet 5.8.0
    MAL-2026-11211 ghsa-malware, reversing-labs
  • npm
    @ethers-sdk/ethers all versions
    MAL-2026-11210 ghsa-malware
  • npm
    dotex-plugin all versions
    MAL-2026-11282 ghsa-malware
  • npm
    dotenv-core all versions
    MAL-2026-11281 ghsa-malware
  • npm
    compose-logger-stand 1.0.126
    MAL-2026-11267 ghsa-malware, amazon-inspector
  • npm
    xp-node-logger all versions
    MAL-2026-11411 ghsa-malware