Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,463 npm 223,297 PyPI 12,017 RubyGems 4,319 NuGet 782 crates.io 25 Go 20 Maven 2 Packagist 1

240,463 reports · Feed

  • RubyGems
    zwan_cal_jan1 0.0.131
    MAL-2026-9837 reversing-labs
  • RubyGems
    zwan_cal_https 0.0.134
    MAL-2026-9836 reversing-labs
  • RubyGems
    zwagweek 0.0.1
    MAL-2026-9835 reversing-labs
  • RubyGems
    zwagq 0.0.1
    MAL-2026-9834 reversing-labs
  • RubyGems
    zwagfrag 0.0.1
    MAL-2026-9833 reversing-labs
  • RubyGems
    zwagbdr 0.0.1
    MAL-2026-9832 reversing-labs
  • RubyGems
    zwagback2 0.0.1
    MAL-2026-9831 reversing-labs
  • RubyGems
    zwagback 0.0.1
    MAL-2026-9830 reversing-labs
  • RubyGems
    zwag26 0.0.1
    MAL-2026-9829 reversing-labs
  • RubyGems
    zw_nobdr_week3 0.0.1338
    MAL-2026-9828 reversing-labs
  • RubyGems
    zw_nobdr_week2 0.0.1337
    MAL-2026-9827 reversing-labs
  • RubyGems
    zw_nobdr_week 0.0.1337
    MAL-2026-9826 reversing-labs
  • RubyGems
    zw_nobdr_events2 0.0.1340
    MAL-2026-9825 reversing-labs
  • RubyGems
    zw_nobdr_events 0.0.1339
    MAL-2026-9824 reversing-labs
  • RubyGems
    zw_nobdr_day3 0.0.1339
    MAL-2026-9823 reversing-labs
  • RubyGems
    zw_nobdr_day2 0.0.1339
    MAL-2026-9822 reversing-labs
  • RubyGems
    zw_nobdr_day 0.0.1338
    MAL-2026-9821 reversing-labs
  • RubyGems
    zw_downloadops 0.0.1340
    MAL-2026-9820 reversing-labs
  • RubyGems
    zw_dl_ics2 0.0.1341
    MAL-2026-9819 reversing-labs
  • RubyGems
    zw_dl_ics 0.0.1340
    MAL-2026-9818 reversing-labs
  • RubyGems
    zw_cal_more 0.0.1341
    MAL-2026-9817 reversing-labs
  • RubyGems
    zvsvnxolbmd1sc9 0.0.1
    MAL-2026-9816 reversing-labs
  • RubyGems
    zvgit7iym3nqhe5 0.0.1
    MAL-2026-9815 reversing-labs
  • RubyGems
    zvfossilc41xzth215 0.0.1
    MAL-2026-9814 reversing-labs
  • RubyGems
    zvbzr0rygmzwp45 0.0.1
    MAL-2026-9813 reversing-labs
  • RubyGems
    ztrivial001 0.0.1
    MAL-2026-9812 reversing-labs
  • RubyGems
    ztestmeta001 0.0.1
    MAL-2026-9811 reversing-labs
  • RubyGems
    ztestlamb01 0.0.1
    MAL-2026-9810 reversing-labs
  • RubyGems
    ztargetpdfs1 0.0.1
    MAL-2026-9809 reversing-labs
  • RubyGems
    ztargetpdfg1 0.0.1
    MAL-2026-9808 reversing-labs
  • RubyGems
    ztargetpdfb1 0.0.1
    MAL-2026-9807 reversing-labs
  • RubyGems
    ztargetpdf1 0.0.1
    MAL-2026-9806 reversing-labs
  • RubyGems
    zswsn1 0.0.1
    MAL-2026-9805 reversing-labs
  • RubyGems
    zswmin111123 0.0.1
    MAL-2026-9804 reversing-labs
  • RubyGems
    zswmeetxml28208 0.0.1
    MAL-2026-9803 reversing-labs
  • RubyGems
    zswgit2 0.0.1
    MAL-2026-9802 reversing-labs
  • RubyGems
    zsweblist25949 0.0.1
    MAL-2026-9801 reversing-labs
  • RubyGems
    zswcalgit1 0.0.1
    MAL-2026-9800 reversing-labs
  • RubyGems
    zswcal3 0.0.1
    MAL-2026-9799 reversing-labs
  • RubyGems
    zswcal2 0.0.1
    MAL-2026-9798 reversing-labs