Skip to content
OpenAdvisories

Supply chain

Malicious packages · npm

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 241,168 npm 223,991 PyPI 12,027 RubyGems 4,320 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

223,991 reports · Feed

  • npm
    data-fetching-client 0.0.1-poc
    MAL-2026-6411 ghsa-malware, amazon-inspector, reversing-labs
  • npm
    @su-doughnym/hubspot-loginui-poc 99.99.99
    MAL-2026-6407 ghsa-malware, amazon-inspector, reversing-labs
  • npm
    solo-nav 1.0.1
    MAL-2026-6436 amazon-inspector, ghsa-malware 1 IOC
  • npm
    serverless-leo 3.0.14
    MAL-2026-6435 amazon-inspector, ghsa-malware 1 IOC
  • npm
    serverless-convention 2.0.4
    MAL-2026-6434 amazon-inspector, ghsa-malware 1 IOC
  • npm
    rstreams-shard-util 1.0.1
    MAL-2026-6433 amazon-inspector, ghsa-malware 1 IOC
  • npm
    rstreams-metrics 2.0.2
    MAL-2026-6432 amazon-inspector, ghsa-malware 1 IOC
  • npm
    leo-streams 2.0.1
    MAL-2026-6431 amazon-inspector, ghsa-malware 1 IOC
  • npm
    leo-sdk 6.0.19
    MAL-2026-6430 amazon-inspector, ghsa-malware 1 IOC
  • npm
    leo-logger 1.0.8
    MAL-2026-6429 amazon-inspector, ghsa-malware 1 IOC
  • npm
    leo-cron 2.0.2
    MAL-2026-6428 amazon-inspector, ghsa-malware 1 IOC
  • npm
    leo-connector-redshift 3.0.6
    MAL-2026-6427 amazon-inspector 1 IOC
  • npm
    leo-connector-oracle 2.0.1
    MAL-2026-6426 amazon-inspector, ghsa-malware 1 IOC
  • npm
    leo-connector-mysql 3.0.3
    MAL-2026-6425 amazon-inspector, ghsa-malware 1 IOC
  • npm
    leo-connector-mongo 3.0.8
    MAL-2026-6424 amazon-inspector, ghsa-malware 1 IOC
  • npm
    leo-connector-elasticsearch 2.0.6
    MAL-2026-6423 amazon-inspector, ghsa-malware 1 IOC
  • npm
    leo-config 1.1.1
    MAL-2026-6422 amazon-inspector 1 IOC
  • npm
    leo-cli 3.0.3
    MAL-2026-6421 amazon-inspector, ghsa-malware 1 IOC
  • npm
    leo-cdk-lib 0.0.2
    MAL-2026-6420 amazon-inspector 1 IOC
  • npm
    leo-cache 1.0.2
    MAL-2026-6419 amazon-inspector, ghsa-malware 1 IOC
  • npm
    leo-aws 2.0.4
    MAL-2026-6418 amazon-inspector 1 IOC
  • npm
    leo-auth 4.0.6
    MAL-2026-6417 amazon-inspector, ghsa-malware 1 IOC
  • npm
    syspo 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4
    MAL-2026-6406 amazon-inspector
  • npm
    syco1 1.0.3, 1.0.4, 1.0.5
    MAL-2026-6404 amazon-inspector, ghsa-malware
  • npm
    sypoi1 1.0.0, 1.0.1, 1.0.2
    MAL-2026-6405 amazon-inspector, ghsa-malware
  • npm
    @kl-dolphin/jump 2.0.0
    MAL-2026-6403 ghsa-malware, amazon-inspector
  • npm
    @kl-dolphin/swim 2.0.0
    MAL-2026-6402 ghsa-malware
  • npm
    zenith-utils 12.0.14, 12.0.15
    MAL-2026-6401 amazon-inspector
  • npm
    normalize-plus 3.6.6
    MAL-2026-6399 ghsa-malware, amazon-inspector
  • npm
    ui-core-system all versions
    MAL-2026-6398 ghsa-malware
  • npm
    ldapaotest all versions
    MAL-2026-6397 ghsa-malware
  • npm
    cccmyssr2 1.0.0
    MAL-2026-6391 amazon-inspector
  • npm
    cccmyssr-util 1.0.0
    MAL-2026-6390 amazon-inspector
  • npm
    cccmyssr3 1.0.0
    MAL-2026-6392 amazon-inspector
  • npm
    react-campaign-optimizer 1.0.0, 1.0.1
    MAL-2026-6395 amazon-inspector, ghsa-malware
  • npm
    signup-embedder 99.99.99-poc2, 99.99.99-poc3, 99.99.99
    MAL-2026-6396 amazon-inspector, ghsa-malware, reversing-labs
  • npm
    chai-as-predicted 6.0.3
    MAL-2026-6393 amazon-inspector
  • npm
    hs-locale-management 99.99.99-poc2, 99.99.99-poc3, 99.99.99
    MAL-2026-6394 amazon-inspector, ghsa-malware, reversing-labs
  • npm
    rapidsearch 1.1.0
    MAL-2026-6388 ghsa-malware, amazon-inspector
  • npm
    multer-express 2.1.1
    MAL-2026-6387 ghsa-malware, amazon-inspector