Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,378 npm 223,239 PyPI 11,995 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,378 reports · Feed

  • npm
    @b2b-frontend/store 1.0.0
    MAL-2026-15675 reversing-labs
  • RubyGems
    ultra-smart-tool 0.0.1
    MAL-2026-15808 reversing-labs
  • RubyGems
    ultra-smart-pkg 0.0.1
    MAL-2026-15807 reversing-labs
  • RubyGems
    ultra-smart-hub 0.0.1
    MAL-2026-15806 reversing-labs
  • RubyGems
    ultra-sharp-kit 0.0.1
    MAL-2026-15805 reversing-labs
  • RubyGems
    ultra-safe-box 0.0.1
    MAL-2026-15804 reversing-labs
  • RubyGems
    ultra-quick-hub 0.0.1
    MAL-2026-15803 reversing-labs
  • RubyGems
    ultra-pure-mod 0.0.1
    MAL-2026-15802 reversing-labs
  • RubyGems
    ultra-pure-hub 0.0.1
    MAL-2026-15801 reversing-labs
  • RubyGems
    ultra-pro-tool 0.0.1
    MAL-2026-15800 reversing-labs
  • RubyGems
    ultra-pro-pkg 0.0.1
    MAL-2026-15799 reversing-labs
  • RubyGems
    ultra-pro-kit 0.0.1
    MAL-2026-15798 reversing-labs
  • RubyGems
    ultra-max-sys 0.0.1
    MAL-2026-15797 reversing-labs
  • RubyGems
    ultra-max-pkg 0.0.1
    MAL-2026-15796 reversing-labs
  • RubyGems
    ultra-fast-rb 0.0.1
    MAL-2026-15795 reversing-labs
  • RubyGems
    ultra-fast-hub 0.0.1
    MAL-2026-15794 reversing-labs
  • RubyGems
    tiny-smart-sys 0.0.1
    MAL-2026-15793 reversing-labs
  • RubyGems
    tiny-smart-mod 0.0.1
    MAL-2026-15792 reversing-labs
  • RubyGems
    tiny-sharp-pkg 0.0.1
    MAL-2026-15791 reversing-labs
  • RubyGems
    tiny-safe-sys 0.0.1
    MAL-2026-15790 reversing-labs
  • RubyGems
    tiny-quick-box 0.0.1
    MAL-2026-15789 reversing-labs
  • RubyGems
    tiny-pure-box 0.0.1
    MAL-2026-15788 reversing-labs
  • RubyGems
    tiny-pro-sys 0.0.1
    MAL-2026-15787 reversing-labs
  • RubyGems
    tiny-pro-rb 0.0.1
    MAL-2026-15786 reversing-labs
  • RubyGems
    tiny-pro-lib 0.0.1
    MAL-2026-15785 reversing-labs
  • RubyGems
    tiny-max-gem 0.0.1
    MAL-2026-15784 reversing-labs
  • RubyGems
    tiny-max-box 0.0.1
    MAL-2026-15783 reversing-labs
  • RubyGems
    super-sharp-sys 0.0.1
    MAL-2026-15782 reversing-labs
  • RubyGems
    super-sharp-lib 0.0.1
    MAL-2026-15781 reversing-labs
  • RubyGems
    super-quick-sys 0.0.1
    MAL-2026-15780 reversing-labs
  • RubyGems
    super-quick-gem 0.0.1
    MAL-2026-15779 reversing-labs
  • RubyGems
    super-pure-rb 0.0.1
    MAL-2026-15778 reversing-labs
  • RubyGems
    super-pro-hub 0.0.1
    MAL-2026-15777 reversing-labs
  • RubyGems
    super-lite-hub 0.0.1
    MAL-2026-15776 reversing-labs
  • RubyGems
    piko-smart-sys 0.0.1
    MAL-2026-15775 reversing-labs
  • RubyGems
    piko-smart-pkg 0.0.1
    MAL-2026-15774 reversing-labs
  • RubyGems
    piko-sharp-sys 0.0.1
    MAL-2026-15773 reversing-labs
  • RubyGems
    piko-max-tool 0.0.1
    MAL-2026-15772 reversing-labs
  • RubyGems
    piko-max-gem 0.0.1
    MAL-2026-15771 reversing-labs
  • RubyGems
    piko-lite-mod 0.0.1
    MAL-2026-15770 reversing-labs