Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,346 npm 223,208 PyPI 11,994 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,346 reports · Feed

npm
ccsec-form-validator 0.0.0-stage
MAL-2026-18348 ghsa-malware, amazon-inspector

Oct 27, 2026
npm
ccsec-crypto-toolkit 0.0.0-stage
MAL-2026-18347 ghsa-malware, amazon-inspector

Oct 27, 2026
npm
agentenact 0.2.0
MAL-2026-18346 ghsa-malware, amazon-inspector

Oct 27, 2026
npm
dsh-vm-tester 0.1.3, 0.1.2, 0.1.4
MAL-2026-18345 ghsa-malware, amazon-inspector

Oct 27, 2026
npm
@webapp-shared/login-vmok 1.0.0, 1.0.1, 1.1.0, 2.0.1, 3.0.0, 99.0.1
MAL-2026-18356 amazon-inspector, ghsa-malware 2 IOCs

Oct 27, 2026
PyPI
numprint 1.2.0
MAL-2026-18343 kam193, amazon-inspector 1 IOC

Oct 27, 2026
npm
adyen-web-v6 0.0.0-stage
MAL-2026-18344 ghsa-malware, amazon-inspector

Oct 27, 2026
npm
buttoncontent 0.0.0-stage
MAL-2026-18339 ghsa-malware, amazon-inspector

Oct 27, 2026
npm
string-target-mapper-hash 1.0.0, 0.0.0-stage
MAL-2026-18342 ghsa-malware, amazon-inspector

Oct 27, 2026
npm
macro-kernel-record-reader 1.0.0, 0.0.0-stage
MAL-2026-18341 ghsa-malware, amazon-inspector

Oct 27, 2026
npm
fetch-hash-cache-atomic 1.0.0, 0.0.0-stage
MAL-2026-18340 ghsa-malware, amazon-inspector

Oct 27, 2026
npm
@azure-growth/signup-ux-components 1.2.2, 1.2.3, 2.9.9
MAL-2026-18338 ossf-package-analysis, amazon-inspector 1 IOC

Oct 27, 2026
npm
@camera.ui/camera-ui-nvr-windows-amd64 1.6.1
MAL-2026-18337 ghsa-malware, amazon-inspector

Oct 27, 2026
PyPI
h13t0ry-hello-demo 0.1.0
MAL-2026-18336 kam193, amazon-inspector 1 IOC

Oct 27, 2026
npm
@zennorg/baileys 1.0.0, 1.0.1
MAL-2026-18922

Oct 27, 2026
npm
@vinzzofficial/baileys 1.0.0, 1.0.1
MAL-2026-18910

Oct 27, 2026
npm
baileys-web4.0 0.1.0
MAL-2026-18946

Oct 27, 2026
npm
@skycodee/baileys-mod 8.0.10, 8.0.8
MAL-2026-18901 2 IOCs

Oct 27, 2026
npm
@yun-xiao/baileys 2.0.0
MAL-2026-18921

Oct 27, 2026
npm
@skycodee/baileys 8.0.5, 8.0.6, 8.0.7, 8.0.8, 8.0.9, 8.0.10, 8.0.11, 8.0.12, 8.0.13, 8.0.14, 8.0.…
MAL-2026-18900 4 IOCs

Oct 27, 2026
npm
@teamqadeer1/baileys 1.0.0, 1.0.1
MAL-2026-18903 2 IOCs

Oct 27, 2026
npm
@vanzzooffc/baileys 1.0.0
MAL-2026-18907 2 IOCs

Oct 27, 2026
npm
amiudmodz 4.0.6, 4.1.2, 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.0.7, 5.0.8, 5.0.9, 5.…
MAL-2026-18934

Oct 27, 2026
npm
baileys-web3 0.1.0, 0.1.1, 0.1.2, 0.1.3
MAL-2026-18945

Oct 27, 2026
npm
@hanzzy/baileys-mod 8.0.11, 8.0.2, 8.0.4, 8.0.5, 8.0.6
MAL-2026-18843 2 IOCs

Oct 27, 2026
npm
@danzxcode/danzx-bail 9.0.5, 9.0.6, 9.0.7
MAL-2026-18816 6 IOCs

Oct 27, 2026
npm
@fanzxnothuman/baileys 2.0.17
MAL-2026-18832

Oct 27, 2026
npm
@gaxtamvan/baileys 1.0.0
MAL-2026-18839 2 IOCs

Oct 27, 2026
npm
@animebails/baileys 1.0.0, 1.0.1, 1.0.2, 1.0.3
MAL-2026-18805

Oct 27, 2026
npm
@denzy-official/baileys 1.2.7, 1.2.8, 1.2.9
MAL-2026-18818

Oct 27, 2026
npm
@fadzzzslebew/baileys 0.1.1
MAL-2026-18831

Oct 27, 2026
npm
@daffadevv/baileys 1.0.0
MAL-2026-18815

Oct 27, 2026
npm
@jexkcode/baileys 1.1.4, 1.1.5, 1.2.0, 1.3.0
MAL-2026-18850

Oct 27, 2026
npm
@elfhkry666/baileys 0.3.20, 0.3.21, 0.3.22, 0.3.23, 0.3.24, 0.3.25, 0.3.26, 0.3.27
MAL-2026-18825

Oct 27, 2026
npm
@hbmodsofc/baileys 2.4.0, 2.5.0, 3.0.0, 3.1.0, 3.2.0
MAL-2026-18846

Oct 27, 2026
npm
@alzx7z/baileys 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8
MAL-2026-18804

Oct 27, 2026
npm
@dilxzcode/bails 2.0.3
MAL-2026-18821

Oct 27, 2026
npm
@baileys-md/baileys 12.2.0
MAL-2026-18807

Oct 27, 2026
npm
@ikyybella/baileys 1.0.0
MAL-2026-18848

Oct 27, 2026
npm
@dinzid/bailstaov1 0.1.0
MAL-2026-18823

Oct 27, 2026