Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,432 npm 223,271 PyPI 12,012 RubyGems 4,319 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

240,432 reports · Feed

  • npm
    breeze-feature-flag-poc all versions
    MAL-2026-10008 ghsa-malware
  • npm
    bizapi-portal all versions
    MAL-2026-10007 ghsa-malware
  • npm
    myclaude-code all versions
    MAL-2026-7032 ghsa-malware
  • npm
    clavuepro 0.1.0
    MAL-2026-7031 ghsa-malware, amazon-inspector
  • npm
    clavue-agent-sdk 2.2.0
    MAL-2026-7030 ghsa-malware, amazon-inspector
  • npm
    clavue all versions
    MAL-2026-7029 ghsa-malware, amazon-inspector
  • npm
    calvuepro 0.1.0
    MAL-2026-7028 ghsa-malware, amazon-inspector
  • npm
    @calm2026/imux all versions
    MAL-2026-7027 ghsa-malware
  • npm
    tailwind-core 4.3.2, 4.3.1, 4.3.0, 0.0.0
    MAL-2026-7026 ghsa-malware, amazon-inspector
  • npm
    @wagni_bot/web3 1.0.0
    MAL-2026-11117 amazon-inspector 1 IOC
  • npm
    @wagni_bot/wagni 1.0.0
    MAL-2026-11116 amazon-inspector 1 IOC
  • npm
    @wagni_bot/polymarket 1.0.0
    MAL-2026-11115 amazon-inspector 1 IOC
  • npm
    @wagni_bot/polygon 1.0.0
    MAL-2026-11114 amazon-inspector 1 IOC
  • npm
    @wagni_bot/opensea 1.0.0
    MAL-2026-11113 amazon-inspector 1 IOC
  • npm
    @wagni_bot/metamask 1.0.0
    MAL-2026-11112 amazon-inspector 1 IOC
  • npm
    @wagni_bot/hyperliquid 1.0.0
    MAL-2026-11111 amazon-inspector 1 IOC
  • npm
    @wagni_bot/eth 1.0.0
    MAL-2026-11110 amazon-inspector 1 IOC
  • npm
    @wagni_bot/bsc 1.0.0
    MAL-2026-11109 amazon-inspector 1 IOC
  • npm
    testudo-pack 1.0.0
    MAL-2026-10075 amazon-inspector 3 IOCs
  • npm
    testis-pack 1.0.0
    MAL-2026-10074 amazon-inspector 3 IOCs
  • npm
    antsrcsrctest 1.0.0
    MAL-2026-10038 amazon-inspector, ossf-package-analysis 3 IOCs
  • npm
    @wagni_bot/web3-toolkit 1.2.0, 1.0.0
    MAL-2026-10037 amazon-inspector 1 IOC
  • npm
    @wagni_bot/web3-agent 1.1.4, 1.1.0, 1.1.3, 1.1.5, 1.0.0, 1.1.1, 1.1.2, 1.2.0
    MAL-2026-10036 amazon-inspector 1 IOC
  • npm
    @wagni_bot/solana-sdk 1.0.0, 1.2.0
    MAL-2026-10035 amazon-inspector 1 IOC
  • npm
    @wagni_bot/pumpfun-sdk 1.2.0, 1.0.0
    MAL-2026-10034 amazon-inspector 1 IOC
  • npm
    @wagni_bot/polymarket-sdk 1.1.5, 1.1.1, 1.1.3, 1.0.0, 1.1.4, 1.1.0, 1.2.0, 1.1.2
    MAL-2026-10033 amazon-inspector 1 IOC
  • npm
    @wagni_bot/polygon-sdk 1.1.5, 1.1.4, 1.0.0, 1.1.1, 1.1.0, 1.1.3, 1.2.0, 1.1.2
    MAL-2026-10032 amazon-inspector 1 IOC
  • npm
    @wagni_bot/orca-sdk 1.0.0, 1.2.0
    MAL-2026-10031 amazon-inspector 1 IOC
  • npm
    @wagni_bot/opensea-sdk 1.1.3, 1.1.5, 1.1.0, 1.1.1, 1.1.4, 1.2.0, 1.0.0, 1.0.2, 1.1.2
    MAL-2026-10030 amazon-inspector 1 IOC
  • npm
    @wagni_bot/meteora-sdk 1.0.0, 1.2.0
    MAL-2026-10029 amazon-inspector 1 IOC
  • npm
    @wagni_bot/metemask-sdk 1.1.5, 1.1.1, 1.0.0, 1.2.0, 1.1.4, 1.1.3, 1.1.0, 1.1.2
    MAL-2026-10028 amazon-inspector 1 IOC
  • npm
    @wagni_bot/jupiter-sdk 1.2.0, 1.0.0
    MAL-2026-10027 amazon-inspector 1 IOC
  • npm
    @wagni_bot/hyperliquid-sdk 1.1.5, 1.0.0, 1.1.4, 1.2.0, 1.1.0, 1.1.1, 1.1.3, 1.1.2
    MAL-2026-10026 amazon-inspector 1 IOC
  • npm
    @wagni_bot/ethereum-wallet 1.2.0, 1.0.0
    MAL-2026-10025 amazon-inspector 1 IOC
  • npm
    @wagni_bot/eth-agent 1.2.0, 1.1.3, 1.1.4, 1.0.0, 1.1.5, 1.1.0, 1.1.1, 1.0.2, 1.1.2
    MAL-2026-10024 amazon-inspector, reversing-labs 1 IOC
  • npm
    @wagni_bot/bsc-sdk 1.2.0, 1.1.3, 1.1.1, 1.1.4, 1.1.0, 1.1.5, 1.0.0, 1.1.2
    MAL-2026-10023 amazon-inspector 1 IOC
  • npm
    @wagni_bot/binance-sdk 1.2.0, 1.0.0
    MAL-2026-10022 amazon-inspector 1 IOC
  • npm
    nodemon-sudo 3.1.16
    MAL-2026-10014 ghsa-malware, amazon-inspector
  • PyPI
    tronsev 0.0.1
    MAL-2026-7025 kam193 4 IOCs
  • PyPI
    dbzy-tools 1.0.1
    MAL-2026-7023 amazon-inspector