Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,346 npm 223,208 PyPI 11,994 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,346 reports · Feed

npm
@fadeldev/baileys-mod 8.0.2, 8.0.3, 8.0.4, 8.0.5
MAL-2026-18828 2 IOCs

Oct 27, 2026
npm
@darling-2002/baileys 1.2.8, 2.8.9
MAL-2026-18817 2 IOCs

Oct 27, 2026
npm
@ikhsan-project/dizzanzz 1.0.0
MAL-2026-18847

Oct 27, 2026
npm
@fyxzbail/baileys 8.0.14
MAL-2026-18836 4 IOCs

Oct 27, 2026
npm
@daffaadev/baileyss 1.0.0
MAL-2026-18814

Oct 27, 2026
npm
@jarxmarkett/baileysnew 2.0.3
MAL-2026-18849 2 IOCs

Oct 27, 2026
npm
@daffaadev/baileys 1.0.1
MAL-2026-18813

Oct 27, 2026
npm
@fadeldev/baileys-mods 8.0.4
MAL-2026-18829

Oct 27, 2026
npm
@fr3xtoy/baileys 1.1.0, 1.1.2, 1.1.3
MAL-2026-18835

Oct 27, 2026
npm
@arkanhahaha/baileys 1.0.0
MAL-2026-18806

Oct 27, 2026
npm
@bellachu/bails 0.0.1, 0.0.2
MAL-2026-18809

Oct 27, 2026
npm
@devpeacemaker/baileys 2.0.1, 2.0.2, 2.0.3
MAL-2026-18820

Oct 27, 2026
npm
@hanzzy/baileys 2.0.3, 2.0.4
MAL-2026-18842

Oct 27, 2026
npm
@gadzzxbaileysnew/baileysnew 3.0.0
MAL-2026-18838 2 IOCs

Oct 27, 2026
npm
@genshirobot/vip 1.0.0, 3.0.0
MAL-2026-18840

Oct 27, 2026
npm
@elfhkry/baileys 8.0.11, 8.0.12
MAL-2026-18824 6 IOCs

Oct 27, 2026
npm
@epinkenedy/siiu 2.0.3
MAL-2026-18826

Oct 27, 2026
npm
@dinzid/bailstao 0.0.7, 0.0.8
MAL-2026-18822

Oct 27, 2026
npm
@bmbxmd/baileys 2.5.8
MAL-2026-18811 2 IOCs

Oct 27, 2026
npm
@devil-fight/baileys 1.0.0, 1.0.1, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7
MAL-2026-18819 3 IOCs

Oct 27, 2026
npm
@aboutdisz/baileys 1.0.0, 1.0.10, 1.0.11, 1.0.12, 1.0.13, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.7, 1.0.8…
MAL-2026-18803

Oct 27, 2026
npm
@getsuzocompany/system 1.0.3, 1.0.4
MAL-2026-18841

Oct 27, 2026
npm
@gadzzmodss/baileys 1.0.0
MAL-2026-18837 2 IOCs

Oct 27, 2026
npm
@hanzzyy/baileys 8.0.0, 8.0.1
MAL-2026-18845 2 IOCs

Oct 27, 2026
npm
@barz-dev/baileys 8.4.0
MAL-2026-18808

Oct 27, 2026
npm
@billabilloyy/baileys 1.0.0
MAL-2026-18810

Oct 27, 2026
npm
@fadeldev/baileys 8.0.3
MAL-2026-18827

Oct 27, 2026
npm
@fadelsm/baileys 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.9
MAL-2026-18830 ghsa-malware

Oct 27, 2026
npm
@bufferstudio/baileys-natsu 1.2.2, 1.2.3
MAL-2026-18812

Oct 27, 2026
npm
@hanzzy/baileys-new 8.0.2
MAL-2026-18844 2 IOCs

Oct 27, 2026
npm
@fanzxnothuman/xbails 1.0.0
MAL-2026-18833

Oct 27, 2026
npm
@farisme/baileys 2.0.3
MAL-2026-18834 2 IOCs

Oct 27, 2026
npm
@metaload/baileys-mod 1.0.0, 6.0.0
MAL-2026-18864

Oct 27, 2026
npm
@zephkiel/wbails 2.0.10, 2.0.8, 2.0.9
MAL-2026-18924

Oct 27, 2026
npm
@vanzzo/priject 1.0.2
MAL-2026-18906 2 IOCs

Oct 27, 2026
npm
@zentrix/baileys 4.1.5, 4.1.9, 4.2.0, 4.2.1, 4.2.2, 4.2.3, 4.2.4, 4.2.5
MAL-2026-18923

Oct 27, 2026
npm
@lubyzzxmods/baileys 2.0.3, 2.0.4
MAL-2026-18862 2 IOCs

Oct 27, 2026
npm
@ndikafath/baileys 1.0.0
MAL-2026-18867 2 IOCs

Oct 27, 2026
npm
@kaelllovemamah/bails 1.0.0
MAL-2026-18853

Oct 27, 2026
npm
@modzneverdie/baileys 17.1.1, 17.1.17, 17.1.18, 17.1.19, 17.1.2, 17.1.20, 17.1.3
MAL-2026-18865

Oct 27, 2026