Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,349 npm 223,211 PyPI 11,994 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,349 reports · Feed

npm
@bellaxchuu/bails all versions
MAL-2026-17675 ghsa-malware

Oct 8, 2026
npm
brat-generator all versions
MAL-2026-17674 ghsa-malware

Oct 8, 2026
npm
@xayz/libsignal-node all versions
MAL-2026-17672 ghsa-malware

Oct 8, 2026
npm
@xayz/brat-generator all versions
MAL-2026-17671 ghsa-malware

Oct 8, 2026
npm
my-baileys 1.0.5, 1.0.4, 1.0.3, 1.0.2, 1.0.1
MAL-2026-17400 ghsa-malware

Oct 8, 2026
npm
@xayz/baileys 6.1.8, 6.1.7, 6.1.6, 6.1.5, 6.1.4, 6.1.3, 6.1.2, 6.1.1, 6.1.0, 6.0.75, 6.0.6, 6…
MAL-2026-17384 ghsa-malware, amazon-inspector

Oct 8, 2026
npm
bottino-baileys all versions
MAL-2026-17673 ghsa-malware

Oct 8, 2026
npm
@itsmee_aizat.id/baileys all versions
MAL-2026-17669 ghsa-malware

Oct 8, 2026
npm
@itsmee_aizat.id/baileys2 2.0.1, 2.0.2, 2.0.0
MAL-2026-17670 ghsa-malware, amazon-inspector

Oct 8, 2026
npm
cantarella-baileys 1.1.13, 1.1.12, 1.1.11
MAL-2026-17390 ghsa-malware

Oct 8, 2026
npm
albert-anitabaileys 1.1.13
MAL-2026-17385 ghsa-malware

Oct 8, 2026
npm
@nyzzpediaa/baileys-new 1.0.12, 1.0.11, 1.0.10, 1.0.9, 1.0.8, 1.0.7, 1.0.6, 1.0.5, 1.0.4, 1.0.3, 1.0.2,…
MAL-2026-17371 ghsa-malware

Oct 8, 2026
npm
dransay 99.0.0
MAL-2026-17700 amazon-inspector 2 IOCs

Oct 8, 2026
npm
@dransay/address-validation 99.0.0
MAL-2026-17668 ossf-package-analysis, amazon-inspector 2 IOCs

Oct 8, 2026
npm
@dransay/logger 99.0.0
MAL-2026-17697 amazon-inspector 2 IOCs

Oct 8, 2026
npm
@dransay/feature-flags 99.0.0
MAL-2026-17696 amazon-inspector 2 IOCs

Oct 8, 2026
npm
@dransay/phone-fix-test 99.0.0
MAL-2026-17698 amazon-inspector 2 IOCs

Oct 8, 2026
npm
@dransay/api 99.0.0
MAL-2026-17805 amazon-inspector 2 IOCs

Oct 8, 2026
npm
@dransay/secrets 99.0.0
MAL-2026-17699 amazon-inspector 2 IOCs

Oct 8, 2026
npm
@dransay/db 99.0.0
MAL-2026-17695 amazon-inspector 2 IOCs

Oct 8, 2026
npm
css-nesting-transform 1.0.0
MAL-2026-17804 2 IOCs

Oct 8, 2026
npm
@bellaxchuu/belbails 1.0.1
MAL-2026-17342 amazon-inspector

Oct 8, 2026
npm
@lendxntaa/baileys 9.5.0, 9.3.0, 9.1.0, 9.0.2, 9.0.1, 0.0.7
MAL-2026-17365 amazon-inspector, ghsa-malware

Oct 8, 2026
npm
kiyoramarkets 8.0.16
MAL-2026-17396 amazon-inspector, ghsa-malware

Oct 8, 2026
npm
mfasolver 1.0.0
MAL-2026-17663 amazon-inspector

Oct 8, 2026
npm
hardhat-promised 2.21.0
MAL-2026-17662 amazon-inspector 2 IOCs

Oct 8, 2026
npm
hardhat-pack 2.0.1
MAL-2026-17661 amazon-inspector

Oct 8, 2026
npm
hardhat-deep 2.0.1
MAL-2026-17659 amazon-inspector

Oct 8, 2026
npm
abbishal-poc2 1.2.0
MAL-2026-17654 amazon-inspector

Oct 8, 2026
npm
hardhat-bits 2.21.0
MAL-2026-17658 amazon-inspector

Oct 8, 2026
npm
hardhat-option 2.0.1
MAL-2026-17660 amazon-inspector 2 IOCs

Oct 8, 2026
npm
dotenv-runtime 1.0.0
MAL-2026-17657 amazon-inspector

Oct 8, 2026
npm
css-flow-render-shim 1.0.0
MAL-2026-17655 amazon-inspector 2 IOCs

Oct 8, 2026
npm
css-reading-display-polyfill 1.0.0
MAL-2026-17656 amazon-inspector 1 IOC

Oct 8, 2026
npm
wix-ssr-thunderbolt-grid-polyfill 0.1.0
MAL-2026-17664 amazon-inspector

Oct 8, 2026
npm
@ziedzzz/demo-canary 1.0.0, 0.0.0-stage
MAL-2026-17652 amazon-inspector, ghsa-malware

Oct 8, 2026
npm
abbishal-poc-as-dependency 1.3.1, 1.3.0
MAL-2026-17653 amazon-inspector, ghsa-malware

Oct 8, 2026
npm
@praveenvjpm/color-utils-7210 1.0.0
MAL-2026-17651 amazon-inspector

Oct 8, 2026
npm
tensorlake 0.5.144
MAL-2026-17650 ghsa-malware, amazon-inspector

Oct 8, 2026
npm
internallib_v788 1.0.1
MAL-2026-17649 ghsa-malware, amazon-inspector

Oct 8, 2026