Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,460 npm 223,294 PyPI 12,017 RubyGems 4,319 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

240,460 reports · Feed

  • npm
    angularbs 8.7.6
    MAL-2026-7141 reversing-labs
  • npm
    angularas 8.7.6
    MAL-2026-7140 reversing-labs
  • npm
    angulapjs 8.7.6
    MAL-2026-7139 reversing-labs
  • npm
    angulaojs 8.7.6
    MAL-2026-7138 reversing-labs
  • npm
    angulanjs 8.7.6
    MAL-2026-7137 reversing-labs
  • npm
    angulamjs 8.7.6
    MAL-2026-7136 reversing-labs
  • npm
    angulaljs 8.7.6
    MAL-2026-7135 reversing-labs
  • npm
    angulakjs 8.7.6
    MAL-2026-7134 reversing-labs
  • npm
    angulajjs 8.7.6
    MAL-2026-7133 reversing-labs
  • npm
    angulaijs 8.7.6
    MAL-2026-7132 reversing-labs
  • npm
    angulahjs 8.7.6
    MAL-2026-7131 reversing-labs
  • npm
    angulagjs 8.7.6
    MAL-2026-7130 reversing-labs
  • npm
    angulafjs 8.7.6
    MAL-2026-7129 reversing-labs
  • npm
    angulaejs 8.7.6
    MAL-2026-7128 reversing-labs
  • npm
    anguladjs 8.7.6
    MAL-2026-7127 reversing-labs
  • npm
    angulacjs 8.7.6
    MAL-2026-7126 reversing-labs
  • npm
    angulabjs 8.7.6
    MAL-2026-7125 reversing-labs
  • npm
    angulaajs 8.7.6
    MAL-2026-7124 reversing-labs
  • npm
    angukarjs 1.1.4, 8.7.6
    MAL-2026-7123 reversing-labs
  • npm
    angujarjs 1.1.4, 8.7.6
    MAL-2026-7122 reversing-labs
  • npm
    anguiarjs 1.1.4, 8.7.6
    MAL-2026-7121 reversing-labs
  • npm
    anguharjs 1.1.4, 8.7.6
    MAL-2026-7120 reversing-labs
  • npm
    angugarjs 1.1.4, 8.7.6
    MAL-2026-7119 reversing-labs
  • npm
    angufarjs 1.1.4, 8.7.6
    MAL-2026-7118 reversing-labs
  • npm
    anguearjs 1.1.4, 8.7.6
    MAL-2026-7117 reversing-labs
  • npm
    angudarjs 1.1.4, 8.7.6
    MAL-2026-7116 reversing-labs
  • npm
    angucarjs 1.1.4, 8.7.6
    MAL-2026-7115 reversing-labs
  • npm
    angubarjs 1.1.4, 8.7.6
    MAL-2026-7114 reversing-labs
  • npm
    anguaarjs 1.1.4, 8.7.6
    MAL-2026-7113 reversing-labs
  • npm
    amgularjs 1.1.2, 1.1.4, 8.7.6
    MAL-2026-7112 reversing-labs
  • npm
    amazon-data 99.1.1
    MAL-2026-7111 reversing-labs
  • npm
    amazon-core 99.1.1
    MAL-2026-7110 reversing-labs
  • npm
    ajgularjs 1.1.2, 1.1.4, 8.7.6
    MAL-2026-7109 reversing-labs
  • npm
    aigularjs 1.1.2, 1.1.4, 8.7.6
    MAL-2026-7108 reversing-labs
  • npm
    ai-devops-helper 1.0.0, 2.0.0, 2.0.1
    MAL-2026-7107 reversing-labs
  • npm
    adminui-deps 1.0.0, 11.10.11
    MAL-2026-7106 reversing-labs
  • npm
    aangularjs 1.1.2, 1.1.4, 8.7.6
    MAL-2026-7105 reversing-labs
  • npm
    @xp-utilities/web 99.0.0
    MAL-2026-7104 reversing-labs
  • npm
    @xp-utilities/utilities 99.0.0
    MAL-2026-7103 reversing-labs
  • npm
    @walkme-ng/shared-ui 9.9.9, 9.9.10
    MAL-2026-7102 reversing-labs