Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,382 npm 223,243 PyPI 11,995 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,382 reports · Feed

  • RubyGems
    piko-sharp-sys 0.0.1
    MAL-2026-15773 reversing-labs
  • RubyGems
    piko-max-tool 0.0.1
    MAL-2026-15772 reversing-labs
  • RubyGems
    piko-max-gem 0.0.1
    MAL-2026-15771 reversing-labs
  • RubyGems
    piko-lite-mod 0.0.1
    MAL-2026-15770 reversing-labs
  • RubyGems
    piko-lite-gem 0.0.1
    MAL-2026-15769 reversing-labs
  • RubyGems
    piko-fast-rb 0.0.1
    MAL-2026-15768 reversing-labs
  • RubyGems
    piko-fast-gem 0.0.1
    MAL-2026-15767 reversing-labs
  • RubyGems
    piko-fast-box 0.0.1
    MAL-2026-15766 reversing-labs
  • RubyGems
    piko-clean-mod 0.0.1
    MAL-2026-15765 reversing-labs
  • RubyGems
    piko-clean-hub 0.0.1
    MAL-2026-15764 reversing-labs
  • RubyGems
    opentelemetry-exporter-otlp-http 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.4
    MAL-2026-15763 reversing-labs
  • RubyGems
    nano-smart-pkg 0.0.1
    MAL-2026-15762 reversing-labs
  • RubyGems
    nano-smart-gem 0.0.1
    MAL-2026-15761 reversing-labs
  • RubyGems
    nano-smart-box 0.0.1
    MAL-2026-15760 reversing-labs
  • RubyGems
    nano-sharp-kit 0.0.1
    MAL-2026-15759 reversing-labs
  • RubyGems
    nano-safe-sys 0.0.1
    MAL-2026-15758 reversing-labs
  • RubyGems
    nano-quick-tool 0.0.1
    MAL-2026-15757 reversing-labs
  • RubyGems
    nano-quick-mod 0.0.1
    MAL-2026-15756 reversing-labs
  • RubyGems
    nano-quick-box 0.0.1
    MAL-2026-15755 reversing-labs
  • RubyGems
    nano-pure-tool 0.0.1
    MAL-2026-15754 reversing-labs
  • RubyGems
    nano-max-mod 0.0.1
    MAL-2026-15753 reversing-labs
  • RubyGems
    nano-max-box 0.0.1
    MAL-2026-15752 reversing-labs
  • RubyGems
    nano-fast-lib 0.0.1
    MAL-2026-15751 reversing-labs
  • RubyGems
    nano-clean-sys 0.0.1
    MAL-2026-15750 reversing-labs
  • RubyGems
    mini-sharp-lib 0.0.1
    MAL-2026-15749 reversing-labs
  • RubyGems
    mini-sharp-kit 0.0.1
    MAL-2026-15748 reversing-labs
  • RubyGems
    mini-safe-mod 0.0.1
    MAL-2026-15747 reversing-labs
  • RubyGems
    mini-safe-lib 0.0.1
    MAL-2026-15746 reversing-labs
  • RubyGems
    mini-safe-gem 0.0.1
    MAL-2026-15745 reversing-labs
  • RubyGems
    mini-quick-pkg 0.0.1
    MAL-2026-15744 reversing-labs
  • RubyGems
    mini-pure-tool 0.0.1
    MAL-2026-15743 reversing-labs
  • RubyGems
    mini-pure-lib 0.0.1
    MAL-2026-15742 reversing-labs
  • RubyGems
    mini-max-gem 0.0.1
    MAL-2026-15741 reversing-labs
  • RubyGems
    mini-lite-rb 0.0.1
    MAL-2026-15740 reversing-labs
  • RubyGems
    mini-fast-lib 0.0.1
    MAL-2026-15739 reversing-labs
  • RubyGems
    mini-clean-sys 0.0.1
    MAL-2026-15738 reversing-labs
  • RubyGems
    micro-sharp-mod 0.0.1
    MAL-2026-15737 reversing-labs
  • RubyGems
    micro-sharp-kit 0.0.1
    MAL-2026-15736 reversing-labs
  • RubyGems
    micro-safe-tool 0.0.1
    MAL-2026-15735 reversing-labs
  • RubyGems
    micro-quick-box 0.0.1
    MAL-2026-15734 reversing-labs