Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,349 npm 223,211 PyPI 11,994 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,349 reports · Feed

npm
dzyclutch-baileys 1.1.13, 1.0.1, 1.1.19, 1.1.20, 1.1.18, 1.1.21, 1.1.17, 1.1.22, 1.1.23, 14.0.0, …
MAL-2026-17620 ghsa-malware, amazon-inspector

Oct 5, 2026
npm
dzyclutch 1.1.12, 1.1.11
MAL-2026-17619 ghsa-malware, amazon-inspector

Oct 5, 2026
npm
@diezyclutch/baileys 0.0.0-stage, 8.6.77
MAL-2026-17618 ghsa-malware, amazon-inspector

Oct 5, 2026
npm
yonzoffic-baileys 8.6.90
MAL-2026-17413 ghsa-malware

Oct 5, 2026
npm
@subql/common 5.8.3
MAL-2026-17571 ghsa-malware, amazon-inspector

Oct 5, 2026
RubyGems
tx-broadcast-utils 1.0.0
MAL-2026-17612 amazon-inspector 2 IOCs

Oct 5, 2026
RubyGems
tron-rb 1.0.0
MAL-2026-17611 amazon-inspector 2 IOCs

Oct 5, 2026
RubyGems
bitcoij-ruby 1.0.0
MAL-2026-17585 amazon-inspector 2 IOCs

Oct 5, 2026
RubyGems
bip39-wordlist-utils 1.0.0
MAL-2026-17581 amazon-inspector 2 IOCs

Oct 5, 2026
npm
checkmate-remediation-assistant 1.0.0
MAL-2026-17572 amazon-inspector 2 IOCs

Oct 5, 2026
RubyGems
etherdum.rb 1.0.0
MAL-2026-17599 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
crylto-toolbox 1.0.0
MAL-2026-17591 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
keccka 1.0.0
MAL-2026-17604 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
solaan-ruby 1.0.0
MAL-2026-17610 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
cryoto-toolbox 1.0.0
MAL-2026-17592 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
bitcion-ruby 1.0.0
MAL-2026-17584 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
ligbtning-invoice 1.0.0
MAL-2026-17605 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
etheremu.rb 1.0.0
MAL-2026-17600 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
kecack 1.0.0
MAL-2026-17603 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
npm
with-cte 1.0.0
MAL-2026-17579 amazon-inspector 2 IOCs

Oct 5, 2026
RubyGems
lightinng-invoice 1.0.0
MAL-2026-17607 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
bitciin 1.0.0
MAL-2026-17582 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
crypti-toolbox 1.0.0
MAL-2026-17593 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
lighthing-invoice 1.0.0
MAL-2026-17606 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
bitcion 1.0.0
MAL-2026-17583 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
ethereum-tx-helper 1.0.0
MAL-2026-17601 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
bitcoin-rpc-lite 1.0.0, 1.0.3
MAL-2026-17587 amazon-inspector, ossf-package-analysis 1 IOC

Oct 5, 2026
RubyGems
web3-eth-utils 1.0.0, 1.0.3
MAL-2026-17616 amazon-inspector, ossf-package-analysis 1 IOC

Oct 5, 2026
RubyGems
btc-wallet-tools 1.0.0, 1.0.3
MAL-2026-17589 amazon-inspector, ossf-package-analysis 1 IOC

Oct 5, 2026
RubyGems
base58-check-helper 1.0.0
MAL-2026-17580 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
lightning-invoice-utils 1.0.0
MAL-2026-17608 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
utxo-set-utils 1.0.0
MAL-2026-17613 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
wallet-crypto-utils 1.0.0, 1.0.3
MAL-2026-17615 amazon-inspector, ossf-package-analysis 1 IOC

Oct 5, 2026
RubyGems
blockchain-sync-utils 1.0.0
MAL-2026-17588 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
merkle-proof-lite 1.0.0
MAL-2026-17609 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
web3-sign-helper 1.0.0
MAL-2026-17617 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
electrum-protocol-lite 1.0.0
MAL-2026-17596 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
crypto-key-utils 1.0.0
MAL-2026-17594 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
bitcoin-address-utils 1.0.0
MAL-2026-17586 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
coinmarket-utils 1.0.0
MAL-2026-17590 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026