Supply chain

Malicious packages · npm

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,408 npm 223,266 PyPI 11,995 RubyGems 4,319 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

223,266 reports · Feed

npm
itsa-react-maskedinput 16.1.2
MAL-2026-17911 ghsa-malware

Oct 16, 2026
npm
itsa-react-focuscontainer 16.0.10
MAL-2026-17910 ghsa-malware

Oct 16, 2026
npm
@beloved-lenora/opencode-todo all versions
MAL-2026-17909 ghsa-malware

Oct 16, 2026
npm
@beloved-lenora/opencode-stats all versions
MAL-2026-17908 ghsa-malware

Oct 16, 2026
npm
@beloved-lenora/opencode-shell-guard 1.0.4, 1.0.3
MAL-2026-17907 ghsa-malware, amazon-inspector

Oct 16, 2026
npm
@beloved-lenora/opencode-shared-rpc all versions
MAL-2026-17906 ghsa-malware

Oct 16, 2026
npm
@beloved-lenora/opencode-orchestrator all versions
MAL-2026-17905 ghsa-malware

Oct 16, 2026
npm
@beloved-lenora/opencode-goal all versions
MAL-2026-17904 ghsa-malware

Oct 16, 2026
npm
@beloved-lenora/opencode-btw all versions
MAL-2026-17903 ghsa-malware

Oct 16, 2026
npm
@xatancchii/natabaileys 1.2.5
MAL-2026-17901 ghsa-malware, amazon-inspector

Oct 16, 2026
npm
parxleys 1.0.1, 1.0.0
MAL-2026-17902 ghsa-malware, amazon-inspector 1 IOC

Oct 16, 2026
npm
@flexmr/survey-conversation 1.0.12, 10.0.12, 2.0.12, 1.0.0, 3.0.12, 0.0.0-stage
MAL-2026-17899 amazon-inspector, ghsa-malware

Oct 16, 2026
npm
@flexmr/survey-client 1.0.0, 1.0.12, 3.0.12, 10.0.12, 2.0.12, 0.0.0-stage
MAL-2026-17898 amazon-inspector, ghsa-malware

Oct 16, 2026
npm
xmd-baileys all versions
MAL-2026-17892 ghsa-malware

Oct 16, 2026
npm
@developmentyora/yorakids all versions
MAL-2026-17890 ghsa-malware

Oct 16, 2026
npm
@developmentyora/baileyss 1.0.0
MAL-2026-17439 ghsa-malware

Oct 16, 2026
npm
asistenyorstore 8.0.14
MAL-2026-17891 ghsa-malware, amazon-inspector

Oct 16, 2026
npm
@celestial-community/baileys 1.0.0
MAL-2026-17438 ghsa-malware 2 IOCs

Oct 16, 2026
npm
rafael-bails all versions
MAL-2026-18713

Oct 16, 2026
npm
oktz-baileys all versions
MAL-2026-18712

Oct 16, 2026
npm
nishiki-bail all versions
MAL-2026-18711

Oct 16, 2026
npm
kurobails all versions
MAL-2026-18710

Oct 16, 2026
npm
@apexacc/audit all versions
MAL-2026-17923 14 IOCs

Oct 16, 2026
npm
buyerdashboard 45.3.4
MAL-2026-17893 amazon-inspector, ghsa-malware 1 IOC

Oct 15, 2026
npm
xapi-lib 88.2.5, 88.2.3, 90.2.1, 90.3.1
MAL-2026-17896 amazon-inspector, ghsa-malware 1 IOC

Oct 15, 2026
npm
web-pixels-manager 76.2.4
MAL-2026-17895 amazon-inspector, ghsa-malware 1 IOC

Oct 15, 2026
npm
idlive-face-capture-web-development 78.8.1
MAL-2026-17894 amazon-inspector, ghsa-malware 1 IOC

Oct 15, 2026
npm
tailwindcss-uniform all versions
MAL-2026-17882 ghsa-malware

Oct 15, 2026
npm
@xxxfnbs21/hello-demo 0.1.8, 0.1.6, 0.1.5, 0.1.3, 0.1.2, 0.1.1, 0.1.0, 0.0.0-stage
MAL-2026-17876 ghsa-malware

Oct 14, 2026
npm
@flexmr/utils 1.0.0, 3.0.12, 1.0.12, 10.0.12, 2.0.12, 0.0.0-stage
MAL-2026-17888 ossf-package-analysis, amazon-inspector, ghsa-malware

Oct 14, 2026
npm
@kre64/hello-npm-test 1.0.0
MAL-2026-17868 ghsa-malware

Oct 14, 2026
npm
@flexmr/ui 99.99.99
MAL-2026-17879 amazon-inspector 3 IOCs

Oct 13, 2026
npm
opencode2-windows-x64 all versions
MAL-2026-17860 ghsa-malware

Oct 13, 2026
npm
opencode2-windows-arm64 all versions
MAL-2026-17859 ghsa-malware

Oct 13, 2026
npm
opencode2-linux-x64-musl all versions
MAL-2026-17858 ghsa-malware

Oct 13, 2026
npm
opencode2-linux-x64 all versions
MAL-2026-17857 ghsa-malware

Oct 13, 2026
npm
opencode2-linux-arm64-musl all versions
MAL-2026-17856 ghsa-malware

Oct 13, 2026
npm
opencode2-linux-arm64 all versions
MAL-2026-17855 ghsa-malware

Oct 13, 2026
npm
opencode2-darwin-x64 all versions
MAL-2026-17854 ghsa-malware

Oct 13, 2026
npm
opencode2-darwin-arm64 all versions
MAL-2026-17853 ghsa-malware

Oct 13, 2026