Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,460 npm 223,294 PyPI 12,017 RubyGems 4,319 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

240,460 reports · Feed

  • npm
    angulurjs 8.7.6
    MAL-2026-7181 reversing-labs
  • npm
    angultrjs 1.1.4, 8.7.6
    MAL-2026-7180 reversing-labs
  • npm
    angulsrjs 8.7.6
    MAL-2026-7179 reversing-labs
  • npm
    angulrrjs 8.7.6
    MAL-2026-7178 reversing-labs
  • npm
    angulprjs 8.7.6
    MAL-2026-7177 reversing-labs
  • npm
    angulorjs 8.7.6
    MAL-2026-7176 reversing-labs
  • npm
    angulnrjs 8.7.6
    MAL-2026-7175 reversing-labs
  • npm
    angulmrjs 8.7.6
    MAL-2026-7174 reversing-labs
  • npm
    angullrjs 1.1.4, 8.7.6
    MAL-2026-7173 reversing-labs
  • npm
    angulkrjs 8.7.6
    MAL-2026-7172 reversing-labs
  • npm
    anguljrjs 8.7.6
    MAL-2026-7171 reversing-labs
  • npm
    angulirjs 8.7.6
    MAL-2026-7170 reversing-labs
  • npm
    angulhrjs 8.7.6
    MAL-2026-7169 reversing-labs
  • npm
    angulgrjs 1.1.4, 8.7.6
    MAL-2026-7168 reversing-labs
  • npm
    angulfrjs 8.7.6
    MAL-2026-7167 reversing-labs
  • npm
    angulerjs 1.1.1, 1.1.2, 1.1.3, 1.1.4, 8.7.6
    MAL-2026-7166 reversing-labs
  • npm
    anguldrjs 1.1.4, 8.7.6
    MAL-2026-7165 reversing-labs
  • npm
    angulcrjs 1.1.4, 8.7.6
    MAL-2026-7164 reversing-labs
  • npm
    angulbrjs 1.1.4, 8.7.6
    MAL-2026-7163 reversing-labs
  • npm
    angulazjs 8.7.6
    MAL-2026-7162 reversing-labs
  • npm
    angulayjs 8.7.6
    MAL-2026-7161 reversing-labs
  • npm
    angulaxjs 8.7.6
    MAL-2026-7160 reversing-labs
  • npm
    angulawjs 1.1.4, 8.7.6
    MAL-2026-7159 reversing-labs
  • npm
    angulavjs 8.7.6
    MAL-2026-7158 reversing-labs
  • npm
    angulaujs 1.1.4, 8.7.6
    MAL-2026-7157 reversing-labs
  • npm
    angulatjs 8.7.6
    MAL-2026-7156 reversing-labs
  • npm
    angulasjs 8.7.6
    MAL-2026-7155 reversing-labs
  • npm
    angularvs 8.7.6
    MAL-2026-7154 reversing-labs
  • npm
    angularus 8.7.6
    MAL-2026-7153 reversing-labs
  • npm
    angularss 1.1.4, 8.7.6
    MAL-2026-7152 reversing-labs
  • npm
    angularrs 8.7.6
    MAL-2026-7151 reversing-labs
  • npm
    angularps 1.1.4, 8.7.6
    MAL-2026-7150 reversing-labs
  • npm
    angularos 8.7.6
    MAL-2026-7149 reversing-labs
  • npm
    angularns 8.7.6
    MAL-2026-7148 reversing-labs
  • npm
    angularls 8.7.6
    MAL-2026-7147 reversing-labs
  • npm
    angularks 8.7.6
    MAL-2026-7146 reversing-labs
  • npm
    angularhs 8.7.6
    MAL-2026-7145 reversing-labs
  • npm
    angulargs 1.1.4, 8.7.6
    MAL-2026-7144 reversing-labs
  • npm
    angularfs 8.7.6
    MAL-2026-7143 reversing-labs
  • npm
    angulards 1.1.4, 8.7.6
    MAL-2026-7142 reversing-labs