Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,347 npm 223,209 PyPI 11,994 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,347 reports · Feed

npm
koezoet-new 1.0.0, 1.0.1
MAL-2026-18984

Oct 27, 2026
npm
mod-baileys 1.0.1, 1.0.2, 1.0.3, 2.0.0
MAL-2026-18991

Oct 27, 2026
npm
mybotthisoneis 1.0.0
MAL-2026-18994 2 IOCs

Oct 27, 2026
npm
shadowmd-baileys 8.6.49, 8.6.50, 8.6.51, 8.6.52, 8.6.54, 8.6.55, 8.6.56, 8.6.57, 8.6.59, 8.6.90,…
MAL-2026-19014

Oct 27, 2026
npm
vinzzknight 1.0.2, 1.0.3, 1.0.4
MAL-2026-19030 5 IOCs

Oct 27, 2026
npm
turbo-baileys 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5
MAL-2026-19022 6 IOCs

Oct 27, 2026
npm
vendetazuu-baileys 1.0.0
MAL-2026-19025

Oct 27, 2026
npm
rsembilaneks-baileys 2.0.4
MAL-2026-19010

Oct 27, 2026
npm
ryuubail 1.0.0
MAL-2026-19012

Oct 27, 2026
npm
ultramaxo-baileys 1.0.0
MAL-2026-19023

Oct 27, 2026
npm
mid-baileys 0.7.26, 0.7.27, 0.7.28, 0.7.29, 0.7.30
MAL-2026-18990 2 IOCs

Oct 27, 2026
npm
mrxd-baileys 1.0.0, 1.0.1, 1.0.2
MAL-2026-18992 4 IOCs

Oct 27, 2026
npm
habibih-bailys 7.3.2
MAL-2026-18978

Oct 27, 2026
npm
lilgabriel-baileys 2.5.10, 2.5.8, 2.5.9
MAL-2026-18985 2 IOCs

Oct 27, 2026
npm
popkid-baileys 1.0.2
MAL-2026-19002

Oct 27, 2026
npm
makamesco-baileys 1.0.0
MAL-2026-18987

Oct 27, 2026
npm
nyttt-baileys 1.0.1
MAL-2026-18998

Oct 27, 2026
npm
ms-nicky-baileys 2.0.3
MAL-2026-18993

Oct 27, 2026
npm
omhcmbud-bails 7.0.4, 7.0.5, 7.0.6, 7.1.0
MAL-2026-18999 2 IOCs

Oct 27, 2026
npm
r-baileys 1.0.0
MAL-2026-19004

Oct 27, 2026
npm
rsembilaneks-baileyss 2.0.3
MAL-2026-19011

Oct 27, 2026
npm
patron-pro 2.0.3, 2.1.0, 2.1.3, 2.1.4, 2.1.5
MAL-2026-19000

Oct 27, 2026
npm
malvin-wa 0.1.0, 0.1.1
MAL-2026-18989

Oct 27, 2026
npm
queenjusmy-baileys-v1 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.8, 1.0.9
MAL-2026-19003

Oct 27, 2026
npm
noya-baileys 6.1.0, 6.1.1, 6.1.2
MAL-2026-18996

Oct 27, 2026
npm
rimuru-md 3.3.0
MAL-2026-19009

Oct 27, 2026
npm
sakubilzz 1.0.0, 1.0.1, 1.0.2
MAL-2026-19013

Oct 27, 2026
npm
silva-baileys 1.0.0, 1.0.1, 1.0.3, 1.0.4
MAL-2026-19016 2 IOCs

Oct 27, 2026
npm
shin-yagami 2.0.4
MAL-2026-19015

Oct 27, 2026
npm
rfn-baileys 1.0.11
MAL-2026-19008 2 IOCs

Oct 27, 2026
npm
ravionbailey 1.0.0
MAL-2026-19005

Oct 27, 2026
npm
skylerss 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4
MAL-2026-19018

Oct 27, 2026
npm
surabails 1.6.0
MAL-2026-19020

Oct 27, 2026
npm
tr4shxsuit 1.0.0
MAL-2026-19021

Oct 27, 2026
npm
reyz-baileys 1.0.2, 1.0.3, 1.0.4, 1.0.5
MAL-2026-19006

Oct 27, 2026
npm
supun-baileyz 1.0.1
MAL-2026-19019

Oct 27, 2026
npm
reyz4you-baileys-v1 1.0.10, 1.0.2, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9
MAL-2026-19007

Oct 27, 2026
npm
skylen-baileys 7.2.3, 7.6.8
MAL-2026-19017

Oct 27, 2026
npm
vinzzxd 1.0.0, 1.0.2
MAL-2026-19031 3 IOCs

Oct 27, 2026
npm
vanzdev 3.0.4, 3.0.5, 3.0.6
MAL-2026-19024 2 IOCs

Oct 27, 2026