Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,347 npm 223,209 PyPI 11,994 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,347 reports · Feed

  • npm
    zakkixd1 27.0.24, 27.1.25, 27.1.26, 27.2.1
    MAL-2026-19045
  • npm
    vendettazuu-baileys 1.0.0
    MAL-2026-19026
  • npm
    yagami-bail 1.0.5
    MAL-2026-19038
  • npm
    vlyzer-baileys 1.0.4
    MAL-2026-19032
  • npm
    venzuu-baileys 1.0.0
    MAL-2026-19028
  • npm
    xprov2baileystest 1.0.0
    MAL-2026-19037 2 IOCs
  • npm
    wertybailz 1.0.10, 1.0.11, 1.0.13, 1.0.5, 1.0.6, 1.0.8, 1.0.9
    MAL-2026-19033
  • npm
    vinzz-baileys 1.0.0
    MAL-2026-19029 2 IOCs
  • npm
    yuuki-baileys 1.0.1, 2.0.0, 2.1.0
    MAL-2026-19044
  • npm
    yukistage 1.1.7
    MAL-2026-19042
  • npm
    wileys-neji 2.0.3
    MAL-2026-19034
  • npm
    wizeza-baileys 2.0.6, 2.0.7
    MAL-2026-19035 2 IOCs
  • npm
    zhenbaileys 1.1.1
    MAL-2026-19049 2 IOCs
  • npm
    yantobail 1.0.11
    MAL-2026-19040
  • npm
    zenvy-baileys 8.6.46, 8.6.47, 8.6.48, 8.6.49, 8.6.50, 8.6.51, 8.6.52
    MAL-2026-19046
  • npm
    zexxo-baileys 1.1.1, 1.1.2, 1.1.3, 1.2.1, 1.2.2
    MAL-2026-19048
  • npm
    xnxx-bail-pro 1.0.0, 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.4.0, 2.4.1
    MAL-2026-19036
  • npm
    yuliawhh 2.0.0
    MAL-2026-19043
  • npm
    zyleys 1.0.0
    MAL-2026-19050
  • npm
    yagami-baileys 2.0.0
    MAL-2026-19039
  • npm
    zenvyflump 2.0.0, 2.0.1, 2.0.2, 2.0.3
    MAL-2026-19047
  • npm
    yazxz 3.0.0, 5.0.0
    MAL-2026-19041
  • npm
    vendezuubaileys 1.0.0
    MAL-2026-19027
  • npm
    zero2-baileys 3.6.0
    MAL-2026-18731 ghsa-malware
  • npm
    @exclipz/baileys 10.0.1
    MAL-2026-18717 ghsa-malware
  • npm
    @exclipz/bails 2.0.3, 2.0.7
    MAL-2026-18718 ghsa-malware
  • npm
    justinofficial 1.0.0
    MAL-2026-18476 ghsa-malware
  • npm
    aytidaoffc 1.0.0, 1.0.1
    MAL-2026-18475 ghsa-malware 3 IOCs
  • npm
    nuxzofficial 2.1.7
    MAL-2026-18469 ghsa-malware
  • npm
    @nuxzofficial/baileys 2.1.7
    MAL-2026-18467 ghsa-malware
  • npm
    ctf-agent 0.1.0
    MAL-2026-18335 ghsa-malware, amazon-inspector
  • npm
    csvflow-schema 1.0.0
    MAL-2026-18357 amazon-inspector 2 IOCs
  • npm
    @iobandamwer/native-helper 0.0.2, 0.0.1, 0.0.0-stage
    MAL-2026-18330 ghsa-malware, amazon-inspector
  • npm
    path-stream-utils-testmetest 0.0.3, 0.0.2, 0.0.1, 0.0.4, 0.0.0-stage
    MAL-2026-18333 ghsa-malware, amazon-inspector
  • npm
    @iobandamwer/cache-helper 1.1.3, 1.1.2, 1.1.1, 1.1.0, 1.0.9, 1.0.8, 1.0.7, 1.0.6, 1.0.5, 1.0.4, 1.0.3, 1.…
    MAL-2026-18329 ghsa-malware, amazon-inspector
  • npm
    postcss-semantic-themes 1.0.0, 1.0.1, 0.0.0-stage
    MAL-2026-18334 ghsa-malware, amazon-inspector
  • npm
    harlow-css-mixer 0.0.0-stage
    MAL-2026-18332 ghsa-malware, amazon-inspector
  • PyPI
    netweavex 1.1.0, 1.1.1, 1.1.2
    MAL-2026-18328 kam193, amazon-inspector 2 IOCs
  • PyPI
    zagents-framework 6.25.30.10b5, 99.25.30.10b5
    MAL-2026-18327 kam193
  • PyPI
    changes-lxc-wrapper 0.0.0, 0.1.0
    MAL-2026-18326 kam193, amazon-inspector