Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,308 npm 223,171 PyPI 11,993 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,308 reports · Feed

PyPI
rcp-ndcg 9999.0.0
MAL-2026-18658 ossf-package-analysis, kam193, amazon-inspector

Nov 5, 2026
PyPI
strands-aidr 9999.0.0
MAL-2026-18657 kam193

Nov 5, 2026
npm
@secauditb20y/sec-test-b1 all versions
MAL-2026-18651 ghsa-malware

Nov 4, 2026
npm
@secaudita10x/sec-test-a1 all versions
MAL-2026-18650 ghsa-malware

Nov 4, 2026
npm
thththtbhthhth all versions
MAL-2026-18656 ghsa-malware

Nov 4, 2026
npm
nannnnnnnnn all versions
MAL-2026-18655 ghsa-malware

Nov 4, 2026
npm
heheheshsds all versions
MAL-2026-18654 ghsa-malware

Nov 4, 2026
npm
dogmans-afterglow all versions
MAL-2026-18653 ghsa-malware

Nov 4, 2026
npm
doghack-afterglow all versions
MAL-2026-18652 ghsa-malware

Nov 4, 2026
npm
@saidddddddddd/ggsgg all versions
MAL-2026-18649 ghsa-malware

Nov 4, 2026
npm
nminer 3.0.0
MAL-2026-18648 ghsa-malware

Nov 4, 2026
npm
@pubngo-stack/help-browser 12.0.23-alpha.3
MAL-2026-18646 ghsa-malware

Nov 4, 2026
npm
@cdmbase/wiki-browser 12.0.18-alpha.53
MAL-2026-18645 ghsa-malware

Nov 4, 2026
npm
@adminide-stack/yantra-help-browser 12.0.194
MAL-2026-18644 ghsa-malware

Nov 4, 2026
npm
@adminide-stack/forms-core 5.1.9-alpha.3
MAL-2026-18640 ghsa-malware

Nov 4, 2026
npm
cdeops 13.5.31
MAL-2026-18647 ghsa-malware

Nov 4, 2026
npm
@adminide-stack/user-activity-browser 1.1.3-alpha.114, 0.0.16-129
MAL-2026-18642 ghsa-malware

Nov 4, 2026
npm
@adminide-stack/health-api-server 0.0.18-alpha.465
MAL-2026-18641 ghsa-malware

Nov 4, 2026
npm
@adminide-stack/client-redux 0.0.16-18
MAL-2026-18639 ghsa-malware

Nov 4, 2026
npm
@adminide-stack/utils 0.0.16-130
MAL-2026-18643 ghsa-malware

Nov 4, 2026
npm
mock-datas-lib all versions
MAL-2026-18637 ghsa-malware

Nov 4, 2026
npm
kvarzo-8f3a2-testmetest all versions
MAL-2026-18636 ghsa-malware

Nov 4, 2026
npm
data-sync-utils all versions
MAL-2026-18634 ghsa-malware

Nov 4, 2026
npm
that-fetch all versions
MAL-2026-18638 ghsa-malware

Nov 4, 2026
npm
filipt all versions
MAL-2026-18635 ghsa-malware

Nov 4, 2026
PyPI
extera-runtime 1.1.0
MAL-2026-18633 kam193, amazon-inspector 1 IOC

Nov 4, 2026
npm
@pasqua-baileys/baileys all versions
MAL-2026-18629 ghsa-malware

Nov 4, 2026
npm
@realvare/baileys all versions
MAL-2026-18630 ghsa-malware

Nov 4, 2026
npm
@realvare/based all versions
MAL-2026-18631 ghsa-malware

Nov 4, 2026
npm
@fyxzpediaa/libsignal all versions
MAL-2026-18628 ghsa-malware

Nov 4, 2026
PyPI
msgpackrpc 0.0.0, 0.1.0
MAL-2026-18627 kam193

Nov 4, 2026
npm
@ai-ecoverse/slicc-windows-amd64 1.46.4
MAL-2026-18626 ghsa-malware

Nov 4, 2026
PyPI
extera-plugin-runtime 1.0.0, 1.0.1
MAL-2026-18625 kam193 1 IOC

Nov 4, 2026
npm
screenshot-desktop 1.16.0
MAL-2026-18624 ghsa-malware

Nov 4, 2026
npm
@ifasn/ms-doc-mcp 2.0.9, 2.1.1
MAL-2026-18603 amazon-inspector

Nov 4, 2026
RubyGems
w002yardprobe 0.0.4, 0.0.5
MAL-2026-18599 amazon-inspector

Nov 4, 2026
RubyGems
brida-frida-hooks 1.0.1
MAL-2026-18598 amazon-inspector

Nov 4, 2026
npm
yzx-npm 1.0.1, 1.0.0
MAL-2026-18597 ghsa-malware

Nov 4, 2026
npm
mocha-ui-themes all versions
MAL-2026-18596 ghsa-malware

Nov 4, 2026
npm
tailwind-form-core 0.5.5
MAL-2026-18594 ghsa-malware, amazon-inspector

Nov 4, 2026