Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,407 npm 223,265 PyPI 11,995 RubyGems 4,319 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,407 reports · Feed

  • npm
    app-soda-layer 2.1.6
    MAL-2026-11128 amazon-inspector 6 IOCs
  • npm
    array-sort-helper 1.0.0
    MAL-2026-11118 ossf-package-analysis, amazon-inspector
  • npm
    json-to-table-util 1.0.0
    MAL-2026-11119 ossf-package-analysis, amazon-inspector
  • npm
    num-format-helper 1.0.0
    MAL-2026-11107 ossf-package-analysis, amazon-inspector
  • npm
    date-sanitize-helper 1.0.0
    MAL-2026-11106 ossf-package-analysis, amazon-inspector
  • npm
    string-format-kit 1.0.2, 1.0.1
    MAL-2026-11108 ossf-package-analysis, amazon-inspector
  • npm
    @vaultflow/update-flow 1.2.6, 1.0.0, 1.2.5
    MAL-2026-11097 ghsa-malware, amazon-inspector
  • npm
    @vaultflow/create-flow 1.0.1, 1.0.2, 1.0.0
    MAL-2026-11096 ghsa-malware, amazon-inspector
  • npm
    motion-forge-css 1.0.1
    MAL-2026-11101 ghsa-malware, amazon-inspector
  • PyPI
    cfgzen 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6
    MAL-2026-11094 kam193, amazon-inspector 3 IOCs
  • npm
    @heartlandone-private/fontawesome-pro 6.3.3, 6.3.6, 6.3.2
    MAL-2026-11093 ossf-package-analysis, amazon-inspector
  • npm
    xo-twofa 28.0.0, 15.0.0
    MAL-2026-11105 ghsa-malware, amazon-inspector
  • npm
    stargateproxyserv 28.0.0, 24.0.0
    MAL-2026-11103 ghsa-malware, amazon-inspector
  • npm
    riskunifiedgatewayserv 28.0.0, 21.0.0
    MAL-2026-11102 ghsa-malware, amazon-inspector
  • npm
    identityauthorizationserv 28.0.0, 21.0.0
    MAL-2026-11100 ghsa-malware, amazon-inspector
  • npm
    crm-reportinsightserv-paypal 28.0.0, 24.0.0
    MAL-2026-11098 ghsa-malware, amazon-inspector
  • npm
    demo-awesome-date-parser-test 0.0.7, 0.0.6, 0.0.5, 0.0.4, 0.0.3, 0.0.2, 0.0.1
    MAL-2026-11099 ghsa-malware, amazon-inspector
  • npm
    @array-util/subsearch 1.0.3
    MAL-2026-11095 ghsa-malware, amazon-inspector
  • npm
    tailwind-motionkit 1.0.2, 1.0.1, 1.0.3
    MAL-2026-11104 ghsa-malware, amazon-inspector
  • npm
    kalipto-runtime 1.0.0
    MAL-2026-11087 ghsa-malware, amazon-inspector
  • npm
    @thone33/react-helpers 1.0.3, 1.0.1, 1.0.2, 1.0.4, 1.0.0
    MAL-2026-11078 ghsa-malware, amazon-inspector
  • npm
    edu-npm-helper-beta 1.0.0
    MAL-2026-11083 ghsa-malware, amazon-inspector
  • npm
    edu-npm-helper-alpha 1.0.0
    MAL-2026-11082 ghsa-malware, amazon-inspector
  • npm
    txs-builder 1.0.6
    MAL-2026-11089 ghsa-malware, amazon-inspector
  • npm
    txs-runner-lib 1.0.1
    MAL-2026-11091 ghsa-malware, amazon-inspector
  • npm
    txs-random-lib 1.0.1
    MAL-2026-11090 ghsa-malware, amazon-inspector
  • npm
    txs-sdk-lib 1.0.1
    MAL-2026-11092 ghsa-malware, amazon-inspector
  • npm
    sixbails 1.0.4, 1.0.0, 1.0.8, 1.1.1, 1.1.0, 1.0.2, 1.0.3, 1.0.7, 1.0.5, 1.0.1, 1.0.6
    MAL-2026-11088 ghsa-malware, amazon-inspector
  • npm
    @vinnxcode/xbailsync 1.0.0, 1.0.1
    MAL-2026-11080 ghsa-malware, amazon-inspector
  • npm
    @vinnxcode/libsignal-node 1.0.0, 1.0.1
    MAL-2026-11079 ghsa-malware, amazon-inspector
  • npm
    amanexzyra-baileys 4.0.2, 4.0.0, 3.0.0
    MAL-2026-11081 ghsa-malware, amazon-inspector
  • npm
    fazzgram 0.1.1, 0.1.0
    MAL-2026-11086 ghsa-malware, amazon-inspector
  • npm
    fazzanime all versions
    MAL-2026-11085 ghsa-malware
  • npm
    @fazzcode/baileys 2.5.3, 2.5.4, 2.5.5, 2.5.6, 2.5.7
    MAL-2026-11073 ghsa-malware, amazon-inspector
  • npm
    @sqlite-tag/sql-creator all versions
    MAL-2026-11077 ghsa-malware
  • npm
    @sqlite-tag/schema-generator all versions
    MAL-2026-11076 ghsa-malware
  • npm
    @sqlite-frame/createsql all versions
    MAL-2026-11075 ghsa-malware
  • npm
    express-self-destruct1 all versions
    MAL-2026-11084 ghsa-malware
  • npm
    @my_name_is_khn/express-security-tool-v2 all versions
    MAL-2026-11074 ghsa-malware
  • PyPI
    random-ua-generator 0.0.1
    MAL-2026-11068 kam193 2 IOCs