Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,463 npm 223,297 PyPI 12,017 RubyGems 4,319 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

240,463 reports · Feed

  • RubyGems
    zztxtwtmp10 0.0.1
    MAL-2026-9997 reversing-labs
  • RubyGems
    zztxtwtmp09 0.0.1
    MAL-2026-9996 reversing-labs
  • RubyGems
    zztxtwtmp08 0.0.1
    MAL-2026-9995 reversing-labs
  • RubyGems
    zztxtwtmp07 0.0.1
    MAL-2026-9994 reversing-labs
  • RubyGems
    zztxtwtmp06 0.0.1
    MAL-2026-9993 reversing-labs
  • RubyGems
    zztxtwtmp05 0.0.1
    MAL-2026-9992 reversing-labs
  • RubyGems
    zztxtwtmp04 0.0.1
    MAL-2026-9991 reversing-labs
  • RubyGems
    zztxtwtmp03 0.0.1
    MAL-2026-9990 reversing-labs
  • RubyGems
    zztxtwtmp02 0.0.1
    MAL-2026-9989 reversing-labs
  • RubyGems
    zztxtwtmp01 0.0.1
    MAL-2026-9988 reversing-labs
  • RubyGems
    zztestproxyfooabcxyz 0.0.1
    MAL-2026-9987 reversing-labs
  • RubyGems
    zztestownedtmp1 0.0.9810
    MAL-2026-9986 reversing-labs
  • RubyGems
    zztestno44 0.0.1
    MAL-2026-9985 reversing-labs
  • RubyGems
    zztestno33 0.0.1
    MAL-2026-9984 reversing-labs
  • RubyGems
    zztest4098 0.0.1
    MAL-2026-9983 reversing-labs
  • RubyGems
    zztest17785553805 0.0.1
    MAL-2026-9982 reversing-labs
  • RubyGems
    zztest17785553774 0.0.1
    MAL-2026-9981 reversing-labs
  • RubyGems
    zztest17785553733 0.0.1
    MAL-2026-9980 reversing-labs
  • RubyGems
    zztest17785553702 0.0.1
    MAL-2026-9979 reversing-labs
  • RubyGems
    zztest17785553661 0.0.1
    MAL-2026-9978 reversing-labs
  • RubyGems
    zztest1778552006 0.0.1
    MAL-2026-9977 reversing-labs
  • RubyGems
    zztemp-ssf-2605 0.0.1
    MAL-2026-9976 reversing-labs
  • RubyGems
    zztargettest18587 0.0.1
    MAL-2026-9975 reversing-labs
  • RubyGems
    zzsouthhack252269 0.0.1
    MAL-2026-9974 reversing-labs
  • RubyGems
    zzproxyoaiabc431848 0.0.1
    MAL-2026-9973 reversing-labs
  • RubyGems
    zzpdfvar15 0.0.1
    MAL-2026-9972 reversing-labs
  • RubyGems
    zzpdfvar14 0.0.1
    MAL-2026-9971 reversing-labs
  • RubyGems
    zzpdfvar13 0.0.1
    MAL-2026-9970 reversing-labs
  • RubyGems
    zzpdfvar12 0.0.1
    MAL-2026-9969 reversing-labs
  • RubyGems
    zzpdfvar11 0.0.1
    MAL-2026-9968 reversing-labs
  • RubyGems
    zzpdfvar10 0.0.1
    MAL-2026-9967 reversing-labs
  • RubyGems
    zzpdfvar09 0.0.1
    MAL-2026-9966 reversing-labs
  • RubyGems
    zzpdfvar08 0.0.1
    MAL-2026-9965 reversing-labs
  • RubyGems
    zzpdfvar07 0.0.1
    MAL-2026-9964 reversing-labs
  • RubyGems
    zzpdfvar06 0.0.1
    MAL-2026-9963 reversing-labs
  • RubyGems
    zzpdfvar05 0.0.1
    MAL-2026-9962 reversing-labs
  • RubyGems
    zzpdfvar04 0.0.1
    MAL-2026-9961 reversing-labs
  • RubyGems
    zzpdfvar03 0.0.1
    MAL-2026-9960 reversing-labs
  • RubyGems
    zzpdfvar02 0.0.1
    MAL-2026-9959 reversing-labs
  • RubyGems
    zzpdfvar01 0.0.1
    MAL-2026-9958 reversing-labs