Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,346 npm 223,208 PyPI 11,994 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,346 reports · Feed

npm
@kasabaileys/baileys 2.0.1
MAL-2026-18854

Oct 27, 2026
npm
@jiancodes/baileys 1.7.3, 1.7.4, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.9
MAL-2026-18851

Oct 27, 2026
npm
@kevin-b2t/baileys 1.0.4
MAL-2026-18855

Oct 27, 2026
npm
@ms-nicky/baileys 2.0.3, 2.0.4
MAL-2026-18866

Oct 27, 2026
npm
@langitdeveloper/baileys 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.1.0, 2.1.1, 2.1.2, 2.1.3, 2.…
MAL-2026-18861 2 IOCs

Oct 27, 2026
npm
@kurtucoben/baileys 0.2.8
MAL-2026-18856

Oct 27, 2026
npm
@makamesco-md/baileys 1.0.1
MAL-2026-18863

Oct 27, 2026
npm
@omhc-mbut/baileys 2.0.3
MAL-2026-18868

Oct 27, 2026
npm
@kyuu2nd/baileys 2.0.0, 2.0.1, 2.0.10, 2.0.11, 2.0.12, 2.0.2, 2.0.24, 2.0.25, 2.0.3, 2.0.4, 2.0.…
MAL-2026-18859 2 IOCs

Oct 27, 2026
npm
@kynna/baileys-pro 8.0.7, 8.0.8
MAL-2026-18858 4 IOCs

Oct 27, 2026
npm
@justinofficial/baileys 2.0.13
MAL-2026-18852

Oct 27, 2026
npm
@shinzepelly/baileys 1.0.8
MAL-2026-18896

Oct 27, 2026
npm
@otpworld/baileys 2.0.3
MAL-2026-18869 2 IOCs

Oct 27, 2026
npm
@kyynotdevv/baileys 2.0.3, 2.0.4, 2.0.6
MAL-2026-18860

Oct 27, 2026
npm
@kurtucoben/cstm-bail 1.0.0
MAL-2026-18857

Oct 27, 2026
npm
@rizzkezik/bails 6.1.0, 6.1.1, 6.1.2
MAL-2026-18888

Oct 27, 2026
npm
@sanzope/bailjir 0.0.4
MAL-2026-18892

Oct 27, 2026
npm
@ryuhan/baileys 1.2.9, 2.0.1, 2.0.2
MAL-2026-18889

Oct 27, 2026
npm
@risaoffc/baileys 8.0.0, 8.0.1, 8.0.2, 8.0.3
MAL-2026-18884 2 IOCs

Oct 27, 2026
npm
@shinzepelly/wabaileys 2.0.3
MAL-2026-18897

Oct 27, 2026
npm
@randev404/baileys 1.0.0
MAL-2026-18878

Oct 27, 2026
npm
@rahadi01/baileys 3.0.1, 3.0.2, 3.0.3
MAL-2026-18876

Oct 27, 2026
npm
@pinaapalerie/baileys 6.0.6
MAL-2026-18872

Oct 27, 2026
npm
@sarayun/baileys 7.0.1
MAL-2026-18895

Oct 27, 2026
npm
@shithsu/baileys-mod 8.0.6, 8.0.7
MAL-2026-18898 2 IOCs

Oct 27, 2026
npm
@poucode/baileys 1.0.0
MAL-2026-18873

Oct 27, 2026
npm
@sanz-0fx/baileys-mod 1.0.3-beta
MAL-2026-18891

Oct 27, 2026
npm
@purpleiriss/irisbail 2.0.3, 2.0.4
MAL-2026-18875

Oct 27, 2026
npm
@pahinak/bails 1.1.1
MAL-2026-18871

Oct 27, 2026
npm
@sanzsayangvien/baileys-pro 2.0.4
MAL-2026-18893

Oct 27, 2026
npm
@rexzlys/wbails 1.0.0
MAL-2026-18883

Oct 27, 2026
npm
@ranstech/bails 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.1.5, 1.1.6, 2.0.0
MAL-2026-18880

Oct 27, 2026
npm
@rizzkezik/baileys 1.1.1
MAL-2026-18887

Oct 27, 2026
npm
@riyanofficial/baileys-pro 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7
MAL-2026-18886 2 IOCs

Oct 27, 2026
npm
@sanndestroyer/baileys 2.0.3
MAL-2026-18890 2 IOCs

Oct 27, 2026
npm
@ravliesh/baileys 1.0.1, 1.0.2
MAL-2026-18881 2 IOCs

Oct 27, 2026
npm
@shurainc/baileys 3.0.2, 3.0.3
MAL-2026-18899

Oct 27, 2026
npm
@sapp1/baileys-pro 1.0.1
MAL-2026-18894

Oct 27, 2026
npm
@rakku-kun/baileys 2.0.10, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.2, 2.0.22, 2.0.23, 2.0.24, …
MAL-2026-18877

Oct 27, 2026
npm
@riyanofficial/baileys 10.0.0, 3.0.0, 3.0.1, 3.0.2, 4.0.0, 8.0.0, 8.4.12
MAL-2026-18885 2 IOCs

Oct 27, 2026