Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,382 npm 223,243 PyPI 11,995 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,382 reports · Feed

npm
async-critical-section 1.0.0
MAL-2026-13998 ghsa-malware, amazon-inspector

Aug 13, 2026
npm
mutex-forge 2.0.1, 2.0.2, 2.0.0
MAL-2026-13955 amazon-inspector, ghsa-malware

Aug 13, 2026
npm
ts-enum-helper all versions
MAL-2026-14015 ghsa-malware

Aug 13, 2026
npm
ai-analyzer 1.0.19, 1.0.16, 1.0.14, 1.0.17, 1.0.18, 1.0.15, 1.0.13, 1.0.12, 1.0.11, 1.0.10,…
MAL-2026-13934 amazon-inspector, ghsa-malware

Aug 13, 2026
npm
datetime-format-xutil 1.0.0
MAL-2026-13936 amazon-inspector

Aug 13, 2026
npm
datetime-fmt-xutil 1.0.0
MAL-2026-13935 amazon-inspector

Aug 13, 2026
npm
@nolimit-agent/win32-x64 1.0.130, 1.0.131, 1.0.133, 1.0.129, 1.0.124, 1.0.127, 1.0.126, 1.0.122, 1.0.132…
MAL-2026-13997 ghsa-malware, amazon-inspector

Aug 13, 2026
npm
@nolimit-agent/linux-x64 1.0.127, 1.0.125, 1.0.126
MAL-2026-13996 ghsa-malware, amazon-inspector

Aug 13, 2026
npm
bs58-77 6.0.1
MAL-2026-14018 amazon-inspector

Aug 13, 2026
npm
bs58-33 6.0.1
MAL-2026-14017 amazon-inspector

Aug 13, 2026
npm
bs58-15 6.0.1
MAL-2026-13964 amazon-inspector

Aug 13, 2026
npm
internallib_v756 1.0.7
MAL-2026-13928 amazon-inspector, ghsa-malware

Aug 12, 2026
npm
svelte-kit-vim 1.0.0
MAL-2026-13927 ghsa-malware, amazon-inspector

Aug 12, 2026
npm
sui-gql 0.2.0, 0.1.0
MAL-2026-13926 ghsa-malware, amazon-inspector

Aug 12, 2026
npm
bcs-compact 1.0.1, 1.0.0
MAL-2026-13925 ghsa-malware, amazon-inspector

Aug 12, 2026
npm
internallib_v392 2.0.3, 1.0.3
MAL-2026-13924 ghsa-malware, amazon-inspector

Aug 12, 2026
npm
tailwind-form-templates 0.7.4
MAL-2026-13923 amazon-inspector

Aug 12, 2026
npm
passkeys-react 1.0.1, 1.1.1
MAL-2026-13922 amazon-inspector, ghsa-malware

Aug 12, 2026
npm
bb-twl-k7x2 1.0.0, 1.0.1
MAL-2026-13920 amazon-inspector

Aug 12, 2026
npm
@years20/n8n-nodes-utils-helper-g 1.0.0
MAL-2026-13916 amazon-inspector

Aug 12, 2026
npm
@years20/n8n-nodes-utils-helper-i 1.0.0
MAL-2026-13918 amazon-inspector

Aug 12, 2026
npm
@years20/n8n-nodes-utils-helper-j 1.0.0
MAL-2026-13919 amazon-inspector

Aug 12, 2026
npm
@years20/n8n-nodes-utils-helper-h 1.0.0
MAL-2026-13917 amazon-inspector

Aug 12, 2026
npm
envpack-conf 1.0.1
MAL-2026-13921 amazon-inspector

Aug 12, 2026
npm
kit-map-vim 1.0.0
MAL-2026-13915 amazon-inspector, ghsa-malware

Aug 12, 2026
npm
@years19/n8n-nodes-utils-helper-e 1.0.0
MAL-2026-13888 amazon-inspector

Aug 12, 2026
npm
@years19/n8n-nodes-utils-helper-f 1.0.0
MAL-2026-13889 amazon-inspector

Aug 12, 2026
npm
@years18/n8n-nodes-utils-helper-y 1.0.0
MAL-2026-13883 amazon-inspector

Aug 12, 2026
npm
@years19/n8n-nodes-utils-helper-a 1.0.0
MAL-2026-13884 amazon-inspector

Aug 12, 2026
npm
@years19/n8n-nodes-utils-helper-b 1.0.0
MAL-2026-13885 amazon-inspector

Aug 12, 2026
npm
@years19/n8n-nodes-utils-helper-d 1.0.0
MAL-2026-13887 amazon-inspector

Aug 12, 2026
npm
@years19/n8n-nodes-utils-helper-c 1.0.0
MAL-2026-13886 amazon-inspector

Aug 12, 2026
npm
@years19/n8n-nodes-utils-helper-g 1.0.0
MAL-2026-13890 amazon-inspector

Aug 12, 2026
npm
@years20/n8n-nodes-utils-helper-c 1.0.0
MAL-2026-13911 amazon-inspector

Aug 12, 2026
npm
@years20/n8n-nodes-utils-helper-a 1.0.0
MAL-2026-13909 amazon-inspector

Aug 12, 2026
npm
@years20/n8n-nodes-utils-helper-b 1.0.0
MAL-2026-13910 amazon-inspector

Aug 12, 2026
npm
@years20/n8n-nodes-utils-helper-f 1.0.0
MAL-2026-13914 amazon-inspector

Aug 12, 2026
npm
@years19/n8n-nodes-utils-helper-h 1.0.0
MAL-2026-13891 amazon-inspector

Aug 12, 2026
npm
@years19/n8n-nodes-utils-helper-j 1.0.0
MAL-2026-13893 amazon-inspector

Aug 12, 2026
npm
@years19/n8n-nodes-utils-helper-i 1.0.0
MAL-2026-13892 amazon-inspector

Aug 12, 2026