Supply chain

Malicious packages · npm

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,408 npm 223,266 PyPI 11,995 RubyGems 4,319 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

223,266 reports · Feed

npm
@revizahoshii/hoshino 1.1.0
MAL-2026-17376 ghsa-malware

Oct 12, 2026
npm
@revizahoshii/baileys 0.5.4, 0.5.3, 0.5.2, 0.5.1, 0.5.0, 0.4.2, 0.4.1, 0.4.0, 0.3.18
MAL-2026-17375 ghsa-malware

Oct 12, 2026
npm
baileys-xbats 1.0.3, 1.0.2, 1.0.1, 1.0.0
MAL-2026-17388 ghsa-malware

Oct 12, 2026
npm
@alipclutch/libsignal-node all versions
MAL-2026-17818 ghsa-malware

Oct 12, 2026
npm
@fhkryxv/baileys-new 0.3.22
MAL-2026-17353 ghsa-malware

Oct 12, 2026
npm
@fhkryxv/baileys 1.0.3, 1.0.1
MAL-2026-17352 ghsa-malware

Oct 12, 2026
npm
@we3js/framework all versions
MAL-2026-17842 ghsa-malware

Oct 12, 2026
npm
@fazzcodestudio/fbot all versions
MAL-2026-17821 ghsa-malware

Oct 12, 2026
npm
@fazzcodestudio/baileys all versions
MAL-2026-17820 ghsa-malware

Oct 12, 2026
npm
@fazzcodestudio/wa-web 0.3.0, 0.3.1
MAL-2026-17441 ghsa-malware

Oct 12, 2026
npm
@fazzcodestudio/mediaformater all versions
MAL-2026-17822 ghsa-malware

Oct 12, 2026
npm
@badzz88/eslint-config all versions
MAL-2026-17819 ghsa-malware

Oct 12, 2026
npm
@astracode/byles-new 0.1.37, 0.1.36, 0.1.35, 0.1.3, 0.0.99, 0.1.2, 0.1.1, 0.1.0
MAL-2026-17340 ghsa-malware

Oct 12, 2026
npm
@modss/libsignal all versions
MAL-2026-17823 ghsa-malware

Oct 12, 2026
npm
@mivesensei/baileys 0.4.2
MAL-2026-17368 ghsa-malware

Oct 12, 2026
npm
@mikudeveloper/libsignal-node all versions
MAL-2026-17814 ghsa-malware

Oct 12, 2026
npm
@mikudeveloper/grace 2.0.1, 1.0.21, 1.0.20
MAL-2026-17367 ghsa-malware

Oct 12, 2026
npm
amprem 0.0.2
MAL-2026-17815 ghsa-malware, amazon-inspector

Oct 12, 2026
npm
@lekzo_dev/amprem 1.0.4
MAL-2026-17813 ghsa-malware, amazon-inspector

Oct 12, 2026
npm
@kanaraa/baileys 3.5.2, 3.5.1, 3.4.7, 3.4.6, 3.4.5, 3.4.4, 3.4.2, 3.5.0, 3.4.1, 3.4.0, 3.3.0, 3.…
MAL-2026-17361 ghsa-malware

Oct 12, 2026
npm
@jojoxyz/condemnedforce-baileys 2.3.0
MAL-2026-17360 ghsa-malware

Oct 12, 2026
npm
nakkinpm all versions
MAL-2026-17817 ghsa-malware

Oct 12, 2026
npm
ikanngeming all versions
MAL-2026-17816 ghsa-malware

Oct 12, 2026
npm
@ikanngeming/npm all versions
MAL-2026-17812 ghsa-malware

Oct 12, 2026
npm
@ikanngeming/blubub all versions
MAL-2026-17811 ghsa-malware

Oct 12, 2026
npm
@ikanngeming/ikannbail 1.0.7, 1.0.6, 1.0.5, 1.0.4, 1.0.3, 1.0.2
MAL-2026-17355 ghsa-malware

Oct 12, 2026
npm
@zaka13/zakasite all versions
MAL-2026-17810 ghsa-malware

Oct 12, 2026
npm
@s4yhiitestpoc/r2-https-b 1.0.0
MAL-2026-17808 amazon-inspector, ghsa-malware

Oct 12, 2026
npm
ap3-foundations-ui 99.0.1
MAL-2026-17806 amazon-inspector, ghsa-malware 1 IOC

Oct 12, 2026
npm
luoxy-baileys 7.1.1, 7.1.2, 7.1.3
MAL-2026-17446 amazon-inspector 1 IOC

Oct 11, 2026
npm
hridoy-ultimate 8.0.0
MAL-2026-17803 amazon-inspector

Oct 11, 2026
npm
@coopeuch/core 1.999.999
MAL-2026-17763 amazon-inspector, ghsa-malware

Oct 11, 2026
npm
@coopeuch/components 1.999.999
MAL-2026-17761 amazon-inspector, ghsa-malware

Oct 11, 2026
npm
@s4yhiitestpoc/scan-https-d 1.0.0
MAL-2026-17766 amazon-inspector, ghsa-malware 3 IOCs

Oct 11, 2026
npm
@coopeuch/common 1.999.999
MAL-2026-17760 amazon-inspector, ghsa-malware

Oct 11, 2026
npm
@s4yhiitestpoc/r2-https 1.0.0
MAL-2026-17764 amazon-inspector

Oct 11, 2026
npm
@s4yhiitestpoc/r3-https 1.0.0, 0.0.0-stage
MAL-2026-17765 amazon-inspector, ghsa-malware 3 IOCs

Oct 11, 2026
npm
react-paginate-v5 99.0.0
MAL-2026-17777 amazon-inspector

Oct 11, 2026
npm
liferay-workspace-scripts 99.9.1
MAL-2026-17772 amazon-inspector, ghsa-malware

Oct 11, 2026
npm
ksp-app 100.100.100
MAL-2026-17770 amazon-inspector

Oct 11, 2026