Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,463 npm 223,297 PyPI 12,017 RubyGems 4,319 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

240,463 reports · Feed

  • RubyGems
    zwkopt14 0.0.3504
    MAL-2026-9877 reversing-labs
  • RubyGems
    zwkopt13 0.0.3503
    MAL-2026-9876 reversing-labs
  • RubyGems
    zwkopt12 0.0.3502
    MAL-2026-9875 reversing-labs
  • RubyGems
    zwkopt11 0.0.3501
    MAL-2026-9874 reversing-labs
  • RubyGems
    zwkopt10 0.0.3499
    MAL-2026-9873 reversing-labs
  • RubyGems
    zwkopt1 0.0.3488
    MAL-2026-9872 reversing-labs
  • RubyGems
    zwkopt0 0.0.3487
    MAL-2026-9871 reversing-labs
  • RubyGems
    zwknum7 0.0.2774
    MAL-2026-9870 reversing-labs
  • RubyGems
    zwknum6 0.0.2773
    MAL-2026-9869 reversing-labs
  • RubyGems
    zwknum5 0.0.2771
    MAL-2026-9868 reversing-labs
  • RubyGems
    zwknum4 0.0.2770
    MAL-2026-9867 reversing-labs
  • RubyGems
    zwknum3 0.0.2769
    MAL-2026-9866 reversing-labs
  • RubyGems
    zwknum2 0.0.2768
    MAL-2026-9865 reversing-labs
  • RubyGems
    zwknum1 0.0.2766
    MAL-2026-9864 reversing-labs
  • RubyGems
    zwknum0 0.0.2765
    MAL-2026-9863 reversing-labs
  • RubyGems
    zwkact8 0.0.3294
    MAL-2026-9862 reversing-labs
  • RubyGems
    zwkact7 0.0.3292
    MAL-2026-9861 reversing-labs
  • RubyGems
    zwkact6 0.0.3291
    MAL-2026-9860 reversing-labs
  • RubyGems
    zwkact5 0.0.3290
    MAL-2026-9859 reversing-labs
  • RubyGems
    zwkact4 0.0.3289
    MAL-2026-9858 reversing-labs
  • RubyGems
    zwkact3 0.0.3287
    MAL-2026-9857 reversing-labs
  • RubyGems
    zwkact2 0.0.3286
    MAL-2026-9856 reversing-labs
  • RubyGems
    zwkact1 0.0.3284
    MAL-2026-9855 reversing-labs
  • RubyGems
    zwday2711778553470 0.0.1
    MAL-2026-9854 reversing-labs
  • RubyGems
    zwday26 0.0.1
    MAL-2026-9853 reversing-labs
  • RubyGems
    zwcalx9 0.0.494
    MAL-2026-9852 reversing-labs
  • RubyGems
    zwcalx8 0.0.493
    MAL-2026-9851 reversing-labs
  • RubyGems
    zwcalx7 0.0.492
    MAL-2026-9850 reversing-labs
  • RubyGems
    zwcalx6 0.0.490
    MAL-2026-9849 reversing-labs
  • RubyGems
    zwcalx5 0.0.489
    MAL-2026-9848 reversing-labs
  • RubyGems
    zwcalx4 0.0.488
    MAL-2026-9847 reversing-labs
  • RubyGems
    zwcalx3 0.0.487
    MAL-2026-9846 reversing-labs
  • RubyGems
    zwcalx2 0.0.486
    MAL-2026-9845 reversing-labs
  • RubyGems
    zwcalx13 0.0.499
    MAL-2026-9844 reversing-labs
  • RubyGems
    zwcalx12 0.0.498
    MAL-2026-9843 reversing-labs
  • RubyGems
    zwcalx11 0.0.497
    MAL-2026-9842 reversing-labs
  • RubyGems
    zwcalx10 0.0.495
    MAL-2026-9841 reversing-labs
  • RubyGems
    zwcalx1 0.0.484
    MAL-2026-9840 reversing-labs
  • RubyGems
    zwcalx0 0.0.483
    MAL-2026-9839 reversing-labs
  • RubyGems
    zwan_cal_jana 0.0.132
    MAL-2026-9838 reversing-labs