Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,370 npm 223,232 PyPI 11,994 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,370 reports · Feed

npm
with-cte 1.0.0
MAL-2026-17579 amazon-inspector 2 IOCs

Oct 5, 2026
RubyGems
lightinng-invoice 1.0.0
MAL-2026-17607 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
bitciin 1.0.0
MAL-2026-17582 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
crypti-toolbox 1.0.0
MAL-2026-17593 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
lighthing-invoice 1.0.0
MAL-2026-17606 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
bitcion 1.0.0
MAL-2026-17583 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
ethereum-tx-helper 1.0.0
MAL-2026-17601 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
bitcoin-rpc-lite 1.0.0, 1.0.3
MAL-2026-17587 amazon-inspector, ossf-package-analysis 1 IOC

Oct 5, 2026
RubyGems
web3-eth-utils 1.0.0, 1.0.3
MAL-2026-17616 amazon-inspector, ossf-package-analysis 1 IOC

Oct 5, 2026
RubyGems
btc-wallet-tools 1.0.0, 1.0.3
MAL-2026-17589 amazon-inspector, ossf-package-analysis 1 IOC

Oct 5, 2026
RubyGems
base58-check-helper 1.0.0
MAL-2026-17580 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
lightning-invoice-utils 1.0.0
MAL-2026-17608 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
utxo-set-utils 1.0.0
MAL-2026-17613 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
wallet-crypto-utils 1.0.0, 1.0.3
MAL-2026-17615 amazon-inspector, ossf-package-analysis 1 IOC

Oct 5, 2026
RubyGems
blockchain-sync-utils 1.0.0
MAL-2026-17588 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
merkle-proof-lite 1.0.0
MAL-2026-17609 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
web3-sign-helper 1.0.0
MAL-2026-17617 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
electrum-protocol-lite 1.0.0
MAL-2026-17596 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
crypto-key-utils 1.0.0
MAL-2026-17594 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
bitcoin-address-utils 1.0.0
MAL-2026-17586 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
coinmarket-utils 1.0.0
MAL-2026-17590 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
hdkey-derive-helper 1.0.0
MAL-2026-17602 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
crypto-mnemonic-tools 1.0.0, 1.0.3
MAL-2026-17595 amazon-inspector, ossf-package-analysis 1 IOC

Oct 5, 2026
RubyGems
wallet-backup-tool 1.0.0
MAL-2026-17614 amazon-inspector, ossf-package-analysis 2 IOCs

Oct 5, 2026
RubyGems
eth-keystore-utils 1.0.0, 1.0.3
MAL-2026-17598 amazon-inspector, ossf-package-analysis 1 IOC

Oct 5, 2026
RubyGems
eth-address-utils 1.0.0, 1.0.3
MAL-2026-17597 amazon-inspector, ossf-package-analysis 1 IOC

Oct 5, 2026
RubyGems
request-guard 1.0.0, 1.0.1
MAL-2026-17569 amazon-inspector 1 IOC

Oct 5, 2026
RubyGems
throttle-requests 1.0.0, 1.0.1
MAL-2026-17570 amazon-inspector 1 IOC

Oct 5, 2026
RubyGems
rate-limit-mini 1.0.0, 1.0.1
MAL-2026-17567 amazon-inspector 1 IOC

Oct 5, 2026
RubyGems
req-throttle-mini 1.0.0, 1.0.1
MAL-2026-17568 amazon-inspector 1 IOC

Oct 5, 2026
npm
unified-platform 99.9.1
MAL-2026-17566 amazon-inspector, ghsa-malware

Oct 5, 2026
npm
risk-detection 99.9.1
MAL-2026-17563 amazon-inspector, ghsa-malware

Oct 5, 2026
npm
typesens 1.0.0
MAL-2026-17565 amazon-inspector

Oct 5, 2026
npm
aria-live-region-helper 1.0.0
MAL-2026-17546 amazon-inspector

Oct 5, 2026
npm
css-at-scope-polyfill 1.0.0
MAL-2026-17547 amazon-inspector

Oct 5, 2026
npm
css-svqggc-polyfill 1.0.0
MAL-2026-17557 amazon-inspector

Oct 5, 2026
npm
css-hgwctv-polyfill 1.0.0
MAL-2026-17552 amazon-inspector

Oct 5, 2026
npm
css-mpmdds-polyfill 1.0.0
MAL-2026-17554 amazon-inspector

Oct 5, 2026
npm
css-txedrf-polyfill 1.0.0
MAL-2026-17558 amazon-inspector

Oct 5, 2026
npm
css-gvqmfn-polyfill 1.0.0
MAL-2026-17551 amazon-inspector

Oct 5, 2026