Supply chain
Malicious packages
Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.
Source: OpenSSF Malicious Packages via OSV.dev
240,382 reports · Feed
- npm
- npm
- npm
- npm
- npm
- npm
- npm
- npm
- npm
- npm
- npm
- npm
- npm
- npm
- npm
- npm
- npm
- npm
- npm
- npm
- npm
-
npm
@years17/n8n-nodes-helper-utils 1.0.2, 1.0.5, 1.0.1, 1.0.0, 1.0.6, 1.0.4, 1.0.3MAL-2026-13869 amazon-inspector
- npm
- npm
- npm
- npm
- npm
- npm
- npm
- npm
- npm
- npm
- npm
- npm
- npm
- npm
- npm
- npm
- npm
- npm