Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,378 npm 223,239 PyPI 11,995 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,378 reports · Feed

  • npm
    shai_hulululud 1.0.48596
    MAL-2026-14548 ghsa-malware, amazon-inspector
  • npm
    grandfather_of_the_desert 0.1.0
    MAL-2026-14547 ghsa-malware, amazon-inspector
  • PyPI
    pybitjs 0.1.0
    MAL-2026-14545 kam193, amazon-inspector 2 IOCs
  • PyPI
    trongridet 0.0.1
    MAL-2026-14542 kam193 4 IOCs
  • npm
    self-sign 5.6.2, 5.6.5, 5.6.8, 5.6.6, 5.6.9, 5.6.4, 5.6.3, 5.6.1, 5.6.7
    MAL-2026-14544 ghsa-malware, amazon-inspector
  • npm
    self-certificates 1.1.2, 1.2.5, 1.2.3, 1.1.9, 1.0.9, 1.1.1, 1.0.2, 1.2.2, 1.1.7, 1.0.5, 1.0.8, 1.…
    MAL-2026-14543 ghsa-malware, amazon-inspector
  • npm
    svelte-vli-ui 1.0.0
    MAL-2026-14541 ghsa-malware, amazon-inspector
  • npm
    vxhjkseuiaqkb 1.0.0
    MAL-2026-15620 amazon-inspector, ghsa-malware
  • npm
    testdgdbcsd 1.0.0, 1.0.1
    MAL-2026-15619 amazon-inspector, ghsa-malware
  • npm
    tesgfvbncsdbcv 1.0.0
    MAL-2026-15618 amazon-inspector, ghsa-malware
  • npm
    skxcmwuncbg2 1.0.0, 1.0.1
    MAL-2026-15617 amazon-inspector, ghsa-malware
  • npm
    ndmxchdjxn2 1.0.0
    MAL-2026-15616 amazon-inspector, ghsa-malware
  • npm
    ndmushdkeqe 1.0.0
    MAL-2026-15615 amazon-inspector, ghsa-malware
  • npm
    ndmfguyhoxc3 1.0.0
    MAL-2026-15614 amazon-inspector, ghsa-malware
  • npm
    mobiwaefhxc3 1.0.0
    MAL-2026-15613 amazon-inspector, ghsa-malware
  • npm
    mndsxcusiwlk1 1.0.0
    MAL-2026-15612 amazon-inspector, ghsa-malware
  • npm
    mn4xcouzvhus 1.0.0
    MAL-2026-15611 amazon-inspector, ghsa-malware
  • npm
    mn3sadkoiewu 1.0.0
    MAL-2026-15610 amazon-inspector, ghsa-malware
  • npm
    mn2adskhweox 1.0.0
    MAL-2026-15609 amazon-inspector, ghsa-malware
  • npm
    mjsdqwocvn 1.0.0
    MAL-2026-15608 amazon-inspector, ghsa-malware
  • npm
    mbxcnsuwgs1 1.0.0
    MAL-2026-15607 amazon-inspector, ghsa-malware
  • npm
    m3fdfocdoewn 1.0.0
    MAL-2026-15606 amazon-inspector, ghsa-malware
  • npm
    m2fcsfyjkuxb 1.0.0
    MAL-2026-15605 amazon-inspector, ghsa-malware
  • npm
    @worrisome/reutil 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.5
    MAL-2026-15604 amazon-inspector, ghsa-malware
  • npm
    zenntechinc-cli 1.6.6, 1.6.4
    MAL-2026-14539 amazon-inspector, ghsa-malware
  • npm
    spotify-url-resolvers 3.4.2
    MAL-2026-14538 amazon-inspector, ghsa-malware
  • npm
    chai-plus 6.2.5, 6.2.3, 6.2.4, 6.3.0, 7.0.0
    MAL-2026-14533 amazon-inspector, ghsa-malware
  • npm
    commonjs-code-token 1.0.1, 1.0.0
    MAL-2026-14534 amazon-inspector
  • npm
    analytics-v2 4.0.0
    MAL-2026-14531 amazon-inspector
  • npm
    mt-ts-serverless-starter 1.0.1
    MAL-2026-14536 amazon-inspector
  • npm
    hydration-vli-ui 1.0.0
    MAL-2026-14535 amazon-inspector, ghsa-malware
  • npm
    chai-as-org 1.0.5
    MAL-2026-14532 amazon-inspector
  • npm
    octopus-action 1.0.1, 1.1.1
    MAL-2026-14537 amazon-inspector, ghsa-malware
  • npm
    @lordmega/baileys all versions
    MAL-2026-14540 ghsa-malware
  • npm
    infomedia all versions
    MAL-2026-14530 ghsa-malware
  • npm
    baileys-mbuilder 4.7.0-lts, 4.5.0-cjs, 4.5.0-lts, 4.5.3-cjs, 4.5.0, 4.5.0-beta, 4.5.0-custom, 4.…
    MAL-2026-14529 ghsa-malware, amazon-inspector
  • npm
    baileys-inmemory-store 1.0.2-beta-3, 1.0.2-beta-4, 1.0.2-beta-6, 1.0.2-beta-5
    MAL-2026-14528 ghsa-malware, amazon-inspector
  • npm
    @fongsidev/scraper all versions
    MAL-2026-14527 ghsa-malware
  • npm
    omniauth-recharge-rails-example 1.0.0
    MAL-2026-14526 ossf-package-analysis, amazon-inspector
  • PyPI
    0xfighter3 0.1
    MAL-2026-14525 kam193