Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,370 npm 223,232 PyPI 11,994 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,370 reports · Feed

  • npm
    @bottino/baileys 1.0.14, 1.0.13, 1.0.12, 1.0.11, 1.0.10, 1.0.9, 1.0.8, 1.0.7, 1.0.6, 1.0.5, 1.0.…
    MAL-2026-17351 amazon-inspector, ghsa-malware
  • npm
    online-header 99.0.0
    MAL-2026-17420 ossf-package-analysis, amazon-inspector
  • PyPI
    friendly-tools 0.1, 0.2
    MAL-2026-17419 kam193, amazon-inspector 1 IOC
  • npm
    @bluewin/utils 1.0.0
    MAL-2026-17437 amazon-inspector 2 IOCs
  • PyPI
    friendly-greeting-tools 0.1.0, 0.1.1, 0.2, 0.3, 0.3.1, 0.3.2, 0.3.3, 0.3.4, 0.3.5, 0.3.6, 0.3.7
    MAL-2026-17416 kam193, amazon-inspector 1 IOC
  • npm
    com.epi.e2e_test 1.2.2
    MAL-2026-17415 amazon-inspector
  • PyPI
    beautifytext 1.0.3, 1.0.4, 1.0.7
    MAL-2026-17417 kam193, amazon-inspector 2 IOCs
  • npm
    xzvbails 0.0.1
    MAL-2026-17411
  • npm
    xvinleys 1.0.0
    MAL-2026-17409
  • npm
    syncxbails 1.0.1, 1.0.0
    MAL-2026-17407
  • npm
    spencer-baileys 1.0.4
    MAL-2026-17406
  • npm
    noxxleys 1.1.6, 1.1.5, 1.1.4, 1.1.2, 1.1.1, 1.1.0, 1.0.0
    MAL-2026-17403
  • npm
    noverojs 1.0.4, 1.0.1
    MAL-2026-17401
  • npm
    lilys-baileys 1.3.3, 1.3.2
    MAL-2026-17398
  • npm
    kasabaileys 1.0.2, 1.0.1, 1.0.0, 0.3.15
    MAL-2026-17394
  • npm
    ishumdz-bail 1.0.16, 1.0.15, 1.0.14, 1.0.13, 1.0.11, 1.0.10, 1.0.9, 1.0.8, 1.0.7, 1.0.6, 1.0…
    MAL-2026-17393
  • npm
    eliteprotech-baileys 1.1.2, 1.1.1, 1.1.0
    MAL-2026-17391
  • npm
    anuaja 1.1.1, 1.1.0, 1.0.0
    MAL-2026-17386
  • npm
    @nyzzpedia/baileys-new 1.0.0
    MAL-2026-17370
  • npm
    @noxleyss/baileys 1.1.10
    MAL-2026-17369
  • npm
    @lendkzn/xntaabail 7.0.0
    MAL-2026-17364
  • npm
    @japofc/baileys 2.4.3, 2.4.2, 2.4.1, 2.4.0, 2.3.0, 2.2.0, 2.1.0
    MAL-2026-17359
  • npm
    @hanzofc/baileys 7.0.1, 7.0.0
    MAL-2026-17354
  • npm
    reactjs-risk 99.17.1, 99.17.2, 99.9.9, 99.17.4, 99.12.0, 99.17.0
    MAL-2026-17339 ossf-package-analysis, amazon-inspector
  • npm
    niksinnkatalapp 100.0.0
    MAL-2026-17435 amazon-inspector 2 IOCs
  • npm
    live-detection-dashboard 100.0.0
    MAL-2026-17434 amazon-inspector 2 IOCs
  • npm
    figma-to-apl 100.0.0
    MAL-2026-17433 amazon-inspector 2 IOCs
  • npm
    brioche-apl-dev-env 100.0.0
    MAL-2026-17432 amazon-inspector 2 IOCs
  • npm
    apl-rive-renderer 100.0.0
    MAL-2026-17431 amazon-inspector 2 IOCs
  • npm
    alexa-cybertron-team-code-review-agent 100.0.0
    MAL-2026-17430 amazon-inspector 2 IOCs
  • npm
    ai-workshop-radio-lambda 100.0.0
    MAL-2026-17429 amazon-inspector 2 IOCs
  • npm
    ai-workshop-radio-app 100.0.0
    MAL-2026-17428 amazon-inspector 2 IOCs
  • npm
    ai-workshop-maa15-radio 100.0.0
    MAL-2026-17427 amazon-inspector 2 IOCs
  • npm
    okra-cloud-cdk 100.0.0
    MAL-2026-17436 amazon-inspector 2 IOCs
  • npm
    @cat-gen/material 1.0.1, 1.0.0, 1.0.2
    MAL-2026-17334 ghsa-malware, amazon-inspector
  • npm
    @cat-gen/materia 1.0.0
    MAL-2026-17333 ghsa-malware, amazon-inspector
  • npm
    @firelordzuka/pulse-poc all versions
    MAL-2026-17335 ghsa-malware
  • npm
    link-status-page 0.0.47, 0.0.38, 0.0.42, 0.0.2, 0.0.50, 0.0.56, 0.0.54, 0.0.45, 0.0.40, 0.0.52, …
    MAL-2026-17338 ghsa-malware, amazon-inspector
  • npm
    link-age-great all versions
    MAL-2026-17337 ghsa-malware
  • npm
    @redman89405/my-module 1.0.0, 1.1.0
    MAL-2026-17336 ghsa-malware, amazon-inspector