Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,408 npm 223,266 PyPI 11,995 RubyGems 4,319 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,408 reports · Feed

PyPI
shark-e2e-bnsneo 0.2.9, 0.2.10, 0.3.1
MAL-2026-10912 reversing-labs, amazon-inspector

Jul 20, 2026
PyPI
mysuperlicense 0.1.0
MAL-2026-10911 reversing-labs

Jul 20, 2026
PyPI
mysupergoodpython 0.1.0
MAL-2026-10910 reversing-labs

Jul 20, 2026
PyPI
ibreak 0.1.2, 0.1.3, 0.1.4
MAL-2026-10909 reversing-labs

Jul 20, 2026
PyPI
hello-world-test-mh3 0.0.1
MAL-2026-10908 reversing-labs, amazon-inspector

Jul 20, 2026
PyPI
hello-world-test-mh2 0.0.1
MAL-2026-10907 reversing-labs, amazon-inspector

Jul 20, 2026
PyPI
paperclip-ai 0.1.0, 0.1.1
MAL-2026-10869 kam193, amazon-inspector 3 IOCs

Jul 20, 2026
PyPI
neroteam-v1 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7
MAL-2026-10868 kam193, amazon-inspector

Jul 20, 2026
PyPI
vantrala 0.1.1
MAL-2026-10867 kam193, amazon-inspector

Jul 20, 2026
PyPI
nemopush 0.1.0, 0.1.1, 0.1.2, 0.1.3
MAL-2026-10866 kam193, amazon-inspector

Jul 20, 2026
PyPI
kimitalk 0.1.0, 0.1.1, 0.1.2
MAL-2026-10865 kam193, amazon-inspector

Jul 20, 2026
PyPI
kimichat 0.1.0, 0.1.1
MAL-2026-10864 kam193, amazon-inspector

Jul 20, 2026
npm
@gocortexio/npmgremlinbox-wxwindows all versions
MAL-2026-10862 ghsa-malware

Jul 20, 2026
npm
@gocortexio/npmgremlinbox-unlicense all versions
MAL-2026-10861 ghsa-malware

Jul 20, 2026
npm
@gocortexio/npmgremlinbox-ucl-1-0 all versions
MAL-2026-10860 ghsa-malware

Jul 20, 2026
npm
@gocortexio/npmgremlinbox-typosquat-webpack all versions
MAL-2026-10859 ghsa-malware

Jul 20, 2026
npm
@gocortexio/npmgremlinbox-typosquat-react all versions
MAL-2026-10858 ghsa-malware

Jul 20, 2026
npm
@gocortexio/npmgremlinbox-typosquat-moment all versions
MAL-2026-10857 ghsa-malware

Jul 20, 2026
npm
@gocortexio/npmgremlinbox-typosquat-lodash all versions
MAL-2026-10856 ghsa-malware

Jul 20, 2026
npm
@gocortexio/npmgremlinbox-typosquat-express all versions
MAL-2026-10855 ghsa-malware

Jul 20, 2026
npm
@gocortexio/npmgremlinbox-typosquat-commander all versions
MAL-2026-10854 ghsa-malware

Jul 20, 2026
npm
@gocortexio/npmgremlinbox-typosquat-chalk all versions
MAL-2026-10853 ghsa-malware

Jul 20, 2026
npm
@gocortexio/npmgremlinbox-typosquat-axios all versions
MAL-2026-10852 ghsa-malware

Jul 20, 2026
npm
@gocortexio/npmgremlinbox-tpl-1-0 all versions
MAL-2026-10851 ghsa-malware

Jul 20, 2026
npm
@gocortexio/npmgremlinbox-tapr-ohl-1-0 all versions
MAL-2026-10850 ghsa-malware

Jul 20, 2026
npm
@gocortexio/npmgremlinbox-sspl-1-0 all versions
MAL-2026-10849 ghsa-malware

Jul 20, 2026
npm
@gocortexio/npmgremlinbox-simpl-2-0 all versions
MAL-2026-10848 ghsa-malware

Jul 20, 2026
npm
@gocortexio/npmgremlinbox-sendmail-8-23 all versions
MAL-2026-10847 ghsa-malware

Jul 20, 2026
npm
@gocortexio/npmgremlinbox-qpl-1-0-inria-2004 all versions
MAL-2026-10846 ghsa-malware

Jul 20, 2026
npm
@gocortexio/npmgremlinbox-polyform-small-business-1-0-0 all versions
MAL-2026-10845 ghsa-malware

Jul 20, 2026
npm
@gocortexio/npmgremlinbox-polyform-noncommercial-1-0-0 all versions
MAL-2026-10844 ghsa-malware

Jul 20, 2026
npm
@gocortexio/npmgremlinbox-osl-3-0 all versions
MAL-2026-10843 ghsa-malware

Jul 20, 2026
npm
@gocortexio/npmgremlinbox-openpbs-2-3 all versions
MAL-2026-10842 ghsa-malware

Jul 20, 2026
npm
@gocortexio/npmgremlinbox-ncgl-uk-2-0 all versions
MAL-2026-10841 ghsa-malware

Jul 20, 2026
npm
@gocortexio/npmgremlinbox-ms-lpl all versions
MAL-2026-10840 ghsa-malware

Jul 20, 2026
npm
@gocortexio/npmgremlinbox-mpl-2-0 all versions
MAL-2026-10839 ghsa-malware

Jul 20, 2026
npm
@gocortexio/npmgremlinbox-mpl-1-1 all versions
MAL-2026-10838 ghsa-malware

Jul 20, 2026
npm
@gocortexio/npmgremlinbox-malware-network-indicators all versions
MAL-2026-10837 ghsa-malware

Jul 20, 2026
npm
@gocortexio/npmgremlinbox-malware-install-execution all versions
MAL-2026-10836 ghsa-malware

Jul 20, 2026
npm
@gocortexio/npmgremlinbox-malware-cryptomining-indicators all versions
MAL-2026-10835 ghsa-malware

Jul 20, 2026