Skip to content
OpenAdvisories

Supply chain

Malicious packages · npm

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,160 npm 223,989 PyPI 12,021 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

223,989 reports · Feed

  • npm
    chai-as-balanced 2.2.3
    MAL-2026-10040 amazon-inspector
  • npm
    chai-deflect 1.1.5, 1.1.6
    MAL-2026-10051 amazon-inspector, reversing-labs
  • npm
    chai-as-sharpened 7.0.9
    MAL-2026-10045 amazon-inspector, reversing-labs
  • npm
    chai-secure 1.2.3, 1.2.5
    MAL-2026-10053 amazon-inspector
  • npm
    chai-smart 2.3.5
    MAL-2026-10054 amazon-inspector, reversing-labs
  • npm
    chai-as-disarmed 3.2.3
    MAL-2026-10042 amazon-inspector
  • npm
    chai-defender 1.0.2, 1.0.0-beta.1, 1.0.1-beta, 1.0.1, 1.1.0, 1.1.1
    MAL-2026-10050 amazon-inspector, ghsa-malware
  • npm
    tailwind-animate-v4 2.1.1, 2.1.0, 1.1.0, 2.1.2
    MAL-2026-10073 amazon-inspector, ghsa-malware
  • npm
    chai-as-smart 2.3.5
    MAL-2026-10046 amazon-inspector
  • npm
    txs-builder-lib 1.0.2, 1.0.1, 1.0.3
    MAL-2026-10021 ghsa-malware, amazon-inspector
  • npm
    client-cookies-agent 99.9.5, 99.9.6, 99.9.7
    MAL-2026-10019 ossf-package-analysis, amazon-inspector
  • npm
    n8n-nodes-mcputils 0.1.5
    MAL-2026-10013 ghsa-malware, amazon-inspector
  • npm
    mchain-sdk 4.2.5
    MAL-2026-10012 ghsa-malware, amazon-inspector
  • npm
    chain-api-sdk 0.2.11, 0.2.10, 0.2.12
    MAL-2026-10009 ghsa-malware, amazon-inspector
  • npm
    testing-d3do 99.9.9
    MAL-2026-10006 ossf-package-analysis, amazon-inspector
  • npm
    security-console-ui all versions
    MAL-2026-10018 ghsa-malware
  • npm
    rabi-snooze-api all versions
    MAL-2026-10017 ghsa-malware
  • npm
    qlkube 1.0.0
    MAL-2026-10016 ghsa-malware, amazon-inspector
  • npm
    poc-node-npm all versions
    MAL-2026-10015 ghsa-malware
  • npm
    fusion-client all versions
    MAL-2026-10011 ghsa-malware
  • npm
    feedback-api all versions
    MAL-2026-10010 ghsa-malware
  • npm
    breeze-feature-flag-poc all versions
    MAL-2026-10008 ghsa-malware
  • npm
    bizapi-portal all versions
    MAL-2026-10007 ghsa-malware
  • npm
    myclaude-code all versions
    MAL-2026-7032 ghsa-malware
  • npm
    clavuepro 0.1.0
    MAL-2026-7031 ghsa-malware, amazon-inspector
  • npm
    clavue-agent-sdk 2.2.0
    MAL-2026-7030 ghsa-malware, amazon-inspector
  • npm
    clavue all versions
    MAL-2026-7029 ghsa-malware, amazon-inspector
  • npm
    calvuepro 0.1.0
    MAL-2026-7028 ghsa-malware, amazon-inspector
  • npm
    @calm2026/imux all versions
    MAL-2026-7027 ghsa-malware
  • npm
    tailwind-core 4.3.2, 4.3.1, 4.3.0, 0.0.0
    MAL-2026-7026 ghsa-malware, amazon-inspector
  • npm
    @wagni_bot/web3 1.0.0
    MAL-2026-11117 amazon-inspector 1 IOC
  • npm
    @wagni_bot/wagni 1.0.0
    MAL-2026-11116 amazon-inspector 1 IOC
  • npm
    @wagni_bot/polymarket 1.0.0
    MAL-2026-11115 amazon-inspector 1 IOC
  • npm
    @wagni_bot/polygon 1.0.0
    MAL-2026-11114 amazon-inspector 1 IOC
  • npm
    @wagni_bot/opensea 1.0.0
    MAL-2026-11113 amazon-inspector 1 IOC
  • npm
    @wagni_bot/metamask 1.0.0
    MAL-2026-11112 amazon-inspector 1 IOC
  • npm
    @wagni_bot/hyperliquid 1.0.0
    MAL-2026-11111 amazon-inspector 1 IOC
  • npm
    @wagni_bot/eth 1.0.0
    MAL-2026-11110 amazon-inspector 1 IOC
  • npm
    @wagni_bot/bsc 1.0.0
    MAL-2026-11109 amazon-inspector 1 IOC
  • npm
    testudo-pack 1.0.0
    MAL-2026-10075 amazon-inspector 3 IOCs