Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,349 npm 223,211 PyPI 11,994 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,349 reports · Feed

npm
rafael-bails all versions
MAL-2026-18713

Oct 16, 2026
npm
oktz-baileys all versions
MAL-2026-18712

Oct 16, 2026
npm
nishiki-bail all versions
MAL-2026-18711

Oct 16, 2026
npm
kurobails all versions
MAL-2026-18710

Oct 16, 2026
npm
@apexacc/audit all versions
MAL-2026-17923 14 IOCs

Oct 16, 2026
PyPI
proxyrobika 0.1.0
MAL-2026-17889 kam193, amazon-inspector

Oct 15, 2026
npm
buyerdashboard 45.3.4
MAL-2026-17893 amazon-inspector, ghsa-malware 1 IOC

Oct 15, 2026
npm
xapi-lib 88.2.5, 88.2.3, 90.2.1, 90.3.1
MAL-2026-17896 amazon-inspector, ghsa-malware 1 IOC

Oct 15, 2026
npm
web-pixels-manager 76.2.4
MAL-2026-17895 amazon-inspector, ghsa-malware 1 IOC

Oct 15, 2026
npm
idlive-face-capture-web-development 78.8.1
MAL-2026-17894 amazon-inspector, ghsa-malware 1 IOC

Oct 15, 2026
PyPI
proxy-rubikis 0.1.0
MAL-2026-17887 kam193

Oct 15, 2026
PyPI
py-wormgpt 1.0.0
MAL-2026-17886 kam193 4 IOCs

Oct 15, 2026
PyPI
proxyrubika 0.1.0
MAL-2026-17885 kam193

Oct 15, 2026
PyPI
getpubip 0.1.0, 0.1.1, 0.1.2
MAL-2026-17884 kam193, amazon-inspector 2 IOCs

Oct 15, 2026
PyPI
py-worm 0.1.0, 2.0.0, 2.0.1
MAL-2026-17883 kam193, amazon-inspector 4 IOCs

Oct 15, 2026
PyPI
py-sock2 0.1.0
MAL-2026-17881 kam193 4 IOCs

Oct 15, 2026
npm
tailwindcss-uniform all versions
MAL-2026-17882 ghsa-malware

Oct 15, 2026
PyPI
saeka 1.0.0, 1.2.0, 1.2.1, 1.2.2, 1.2.3, 1.3.0, 1.4.0, 1.5.0, 1.6.0, 1.7.0, 1.8.0, 1.…
MAL-2026-17877 kam193, amazon-inspector 2 IOCs

Oct 14, 2026
npm
@xxxfnbs21/hello-demo 0.1.8, 0.1.6, 0.1.5, 0.1.3, 0.1.2, 0.1.1, 0.1.0, 0.0.0-stage
MAL-2026-17876 ghsa-malware

Oct 14, 2026
npm
@flexmr/utils 1.0.0, 3.0.12, 1.0.12, 10.0.12, 2.0.12, 0.0.0-stage
MAL-2026-17888 ossf-package-analysis, amazon-inspector, ghsa-malware

Oct 14, 2026
npm
@kre64/hello-npm-test 1.0.0
MAL-2026-17868 ghsa-malware

Oct 14, 2026
PyPI
crelic-bqwheel-52f66a3f1d 0.0.1
MAL-2026-17863 kam193

Oct 13, 2026
npm
@flexmr/ui 99.99.99
MAL-2026-17879 amazon-inspector 3 IOCs

Oct 13, 2026
PyPI
fontcase 0.1.0, 0.1.1, 0.1.2
MAL-2026-17862 kam193 3 IOCs

Oct 13, 2026
PyPI
sysdiagd 1.2.1, 1.2.2, 1.2.3
MAL-2026-17861 kam193, amazon-inspector

Oct 13, 2026
npm
opencode2-windows-x64 all versions
MAL-2026-17860 ghsa-malware

Oct 13, 2026
npm
opencode2-windows-arm64 all versions
MAL-2026-17859 ghsa-malware

Oct 13, 2026
npm
opencode2-linux-x64-musl all versions
MAL-2026-17858 ghsa-malware

Oct 13, 2026
npm
opencode2-linux-x64 all versions
MAL-2026-17857 ghsa-malware

Oct 13, 2026
npm
opencode2-linux-arm64-musl all versions
MAL-2026-17856 ghsa-malware

Oct 13, 2026
npm
opencode2-linux-arm64 all versions
MAL-2026-17855 ghsa-malware

Oct 13, 2026
npm
opencode2-darwin-x64 all versions
MAL-2026-17854 ghsa-malware

Oct 13, 2026
npm
opencode2-darwin-arm64 all versions
MAL-2026-17853 ghsa-malware

Oct 13, 2026
npm
opencode2 all versions
MAL-2026-17852 ghsa-malware

Oct 13, 2026
npm
yoodan-github-single-ver-pkg 1.0.1
MAL-2026-17851 ghsa-malware

Oct 13, 2026
npm
@accenturecodefoundry/mfe-pot-shared-ui-scds-core 99.99.2, 99.99.4, 99.99.41, 99.99.43
MAL-2026-17867 amazon-inspector 4 IOCs

Oct 13, 2026
npm
@chatest/baileys 4.4.1, 4.4.0
MAL-2026-17850 ghsa-malware, amazon-inspector

Oct 13, 2026
npm
brass-common 99.9.1
MAL-2026-17849 ossf-package-analysis, amazon-inspector, ghsa-malware

Oct 13, 2026
npm
monkey-tags-ip 53.4.1
MAL-2026-17875 amazon-inspector, ghsa-malware 2 IOCs

Oct 13, 2026
npm
@user-interface-common/common-styles 66.1.6
MAL-2026-17874 amazon-inspector, ghsa-malware 2 IOCs

Oct 13, 2026