Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,463 npm 223,297 PyPI 12,017 RubyGems 4,319 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

240,463 reports · Feed

  • RubyGems
    zzpdfvar00 0.0.1
    MAL-2026-9957 reversing-labs
  • RubyGems
    zzlambtestf295 0.0.495723
    MAL-2026-9956 reversing-labs
  • RubyGems
    zzlambcalx1778552149 0.0.1
    MAL-2026-9955 reversing-labs
  • RubyGems
    zzjinavcssvn 0.0.1
    MAL-2026-9954 reversing-labs
  • RubyGems
    zzjinavcshg 0.0.1
    MAL-2026-9953 reversing-labs
  • RubyGems
    zzjinavcsgit 0.0.1
    MAL-2026-9952 reversing-labs
  • RubyGems
    zzjinavcsfossil 0.0.1
    MAL-2026-9951 reversing-labs
  • RubyGems
    zzjinavcsbzr 0.0.1
    MAL-2026-9950 reversing-labs
  • RubyGems
    zzfadgivar13 0.0.1
    MAL-2026-9949 reversing-labs
  • RubyGems
    zzfadgivar12 0.0.1
    MAL-2026-9948 reversing-labs
  • RubyGems
    zzfadgivar11 0.0.1
    MAL-2026-9947 reversing-labs
  • RubyGems
    zzfadgivar10 0.0.1
    MAL-2026-9946 reversing-labs
  • RubyGems
    zzfadgivar09 0.0.1
    MAL-2026-9945 reversing-labs
  • RubyGems
    zzfadgivar08 0.0.1
    MAL-2026-9944 reversing-labs
  • RubyGems
    zzfadgivar07 0.0.1
    MAL-2026-9943 reversing-labs
  • RubyGems
    zzfadgivar06 0.0.1
    MAL-2026-9942 reversing-labs
  • RubyGems
    zzfadgivar05 0.0.1
    MAL-2026-9941 reversing-labs
  • RubyGems
    zzfadgivar04 0.0.1
    MAL-2026-9940 reversing-labs
  • RubyGems
    zzfadgivar03 0.0.1
    MAL-2026-9939 reversing-labs
  • RubyGems
    zzfadgivar02 0.0.1
    MAL-2026-9938 reversing-labs
  • RubyGems
    zzfadgivar01 0.0.1
    MAL-2026-9937 reversing-labs
  • RubyGems
    zzfadgivar00 0.0.1
    MAL-2026-9936 reversing-labs
  • RubyGems
    zzdelay2119 0.0.1
    MAL-2026-9935 reversing-labs
  • RubyGems
    zz_arcdata 0.0.1
    MAL-2026-9934 reversing-labs
  • RubyGems
    zz-oai-test12 0.0.1
    MAL-2026-9933 reversing-labs
  • RubyGems
    zwxbcstan 0.0.1
    MAL-2026-9932 reversing-labs
  • RubyGems
    zwxbcsacre 0.0.1
    MAL-2026-9931 reversing-labs
  • RubyGems
    zwxbclic 0.0.1
    MAL-2026-9930 reversing-labs
  • RubyGems
    zwxbcgrant 0.0.1
    MAL-2026-9929 reversing-labs
  • RubyGems
    zwxbccali 0.0.1
    MAL-2026-9928 reversing-labs
  • RubyGems
    zwxbccalag 0.0.1
    MAL-2026-9927 reversing-labs
  • RubyGems
    zwxbccaba 0.0.1
    MAL-2026-9926 reversing-labs
  • RubyGems
    zwxbccab 0.0.1
    MAL-2026-9925 reversing-labs
  • RubyGems
    zwwmin44268 0.0.1
    MAL-2026-9924 reversing-labs
  • RubyGems
    zwwmin34639 0.0.1
    MAL-2026-9923 reversing-labs
  • RubyGems
    zwwmin231650 0.0.1
    MAL-2026-9922 reversing-labs
  • RubyGems
    zwwmin115707 0.0.1
    MAL-2026-9921 reversing-labs
  • RubyGems
    zwwactb3703 0.0.1
    MAL-2026-9920 reversing-labs
  • RubyGems
    zwwacta5072 0.0.1
    MAL-2026-9919 reversing-labs
  • RubyGems
    zwttestdoc 0.0.1
    MAL-2026-9918 reversing-labs