Skip to content
OpenAdvisories

Supply chain

Malicious packages · npm

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,167 npm 223,990 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

223,990 reports · Feed

  • npm
    angutarjs 1.1.4, 8.7.6
    MAL-2026-7193 reversing-labs
  • npm
    angusarjs 1.1.4, 8.7.6
    MAL-2026-7192 reversing-labs
  • npm
    angurarjs 1.1.4, 8.7.6
    MAL-2026-7191 reversing-labs
  • npm
    anguparjs 1.1.4, 8.7.6
    MAL-2026-7190 reversing-labs
  • npm
    anguoarjs 1.1.4, 8.7.6
    MAL-2026-7189 reversing-labs
  • npm
    angunarjs 1.1.4
    MAL-2026-7188 reversing-labs
  • npm
    angumarjs 1.1.4, 8.7.6
    MAL-2026-7187 reversing-labs
  • npm
    angulzrjs 8.7.6
    MAL-2026-7186 reversing-labs
  • npm
    angulyrjs 8.7.6
    MAL-2026-7185 reversing-labs
  • npm
    angulxrjs 8.7.6
    MAL-2026-7184 reversing-labs
  • npm
    angulwrjs 8.7.6
    MAL-2026-7183 reversing-labs
  • npm
    angulvrjs 8.7.6
    MAL-2026-7182 reversing-labs
  • npm
    angulurjs 8.7.6
    MAL-2026-7181 reversing-labs
  • npm
    angultrjs 1.1.4, 8.7.6
    MAL-2026-7180 reversing-labs
  • npm
    angulsrjs 8.7.6
    MAL-2026-7179 reversing-labs
  • npm
    angulrrjs 8.7.6
    MAL-2026-7178 reversing-labs
  • npm
    angulprjs 8.7.6
    MAL-2026-7177 reversing-labs
  • npm
    angulorjs 8.7.6
    MAL-2026-7176 reversing-labs
  • npm
    angulnrjs 8.7.6
    MAL-2026-7175 reversing-labs
  • npm
    angulmrjs 8.7.6
    MAL-2026-7174 reversing-labs
  • npm
    angullrjs 1.1.4, 8.7.6
    MAL-2026-7173 reversing-labs
  • npm
    angulkrjs 8.7.6
    MAL-2026-7172 reversing-labs
  • npm
    anguljrjs 8.7.6
    MAL-2026-7171 reversing-labs
  • npm
    angulirjs 8.7.6
    MAL-2026-7170 reversing-labs
  • npm
    angulhrjs 8.7.6
    MAL-2026-7169 reversing-labs
  • npm
    angulgrjs 1.1.4, 8.7.6
    MAL-2026-7168 reversing-labs
  • npm
    angulfrjs 8.7.6
    MAL-2026-7167 reversing-labs
  • npm
    angulerjs 1.1.1, 1.1.2, 1.1.3, 1.1.4, 8.7.6
    MAL-2026-7166 reversing-labs
  • npm
    anguldrjs 1.1.4, 8.7.6
    MAL-2026-7165 reversing-labs
  • npm
    angulcrjs 1.1.4, 8.7.6
    MAL-2026-7164 reversing-labs
  • npm
    angulbrjs 1.1.4, 8.7.6
    MAL-2026-7163 reversing-labs
  • npm
    angulazjs 8.7.6
    MAL-2026-7162 reversing-labs
  • npm
    angulayjs 8.7.6
    MAL-2026-7161 reversing-labs
  • npm
    angulaxjs 8.7.6
    MAL-2026-7160 reversing-labs
  • npm
    angulawjs 1.1.4, 8.7.6
    MAL-2026-7159 reversing-labs
  • npm
    angulavjs 8.7.6
    MAL-2026-7158 reversing-labs
  • npm
    angulaujs 1.1.4, 8.7.6
    MAL-2026-7157 reversing-labs
  • npm
    angulatjs 8.7.6
    MAL-2026-7156 reversing-labs
  • npm
    angulasjs 8.7.6
    MAL-2026-7155 reversing-labs
  • npm
    angularvs 8.7.6
    MAL-2026-7154 reversing-labs