Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,371 npm 223,233 PyPI 11,994 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,371 reports · Feed

  • npm
    @client-web-next/icons 0.0.1
    MAL-2026-16503 reversing-labs
  • npm
    @client-web-next/footer 0.0.1
    MAL-2026-16502 reversing-labs
  • npm
    @client-web-next/feature-flags 0.0.1
    MAL-2026-16501 reversing-labs
  • npm
    @client-web-next/event-bus-listener 0.0.1
    MAL-2026-16500 reversing-labs
  • npm
    @client-web-next/env-util 0.0.1
    MAL-2026-16499 reversing-labs
  • npm
    @client-web-next/cms 0.0.1
    MAL-2026-16498 reversing-labs
  • npm
    @client-web-next/api-metrics 0.0.1
    MAL-2026-16497 reversing-labs
  • npm
    @client-web-next/analytics 0.0.1
    MAL-2026-16496 reversing-labs
  • npm
    @client-web-next/adaptive 0.0.1
    MAL-2026-16495 reversing-labs
  • npm
    @client-web-next/ab-tests 0.0.1
    MAL-2026-16494 reversing-labs
  • npm
    @client-web-next/ab-landing-form 0.0.1
    MAL-2026-16493 reversing-labs
  • npm
    @cartradetech/example-package 1.0.0
    MAL-2026-16492 reversing-labs
  • npm
    @adominadmininstr/fmt-date-helper 1.0.0
    MAL-2026-16491 reversing-labs
  • npm
    @adominadmininstr/date-util-helper 1.0.0
    MAL-2026-16490 reversing-labs
  • RubyGems
    mega-clean-box 0.0.1
    MAL-2026-17152 reversing-labs
  • RubyGems
    burndler 1.0.66322
    MAL-2026-17151 reversing-labs
  • RubyGems
    burndlef 1.0.20831
    MAL-2026-17150 reversing-labs
  • RubyGems
    burmdler 1.0.3039
    MAL-2026-17149 reversing-labs
  • RubyGems
    buosndler 1.0.49497
    MAL-2026-17148 reversing-labs
  • RubyGems
    buonlder 1.0.85175
    MAL-2026-17147 reversing-labs
  • RubyGems
    buondler 1.0.85690
    MAL-2026-17146 reversing-labs
  • RubyGems
    buondlef 1.0.14096
    MAL-2026-17145 reversing-labs
  • RubyGems
    buomdler 1.0.51011
    MAL-2026-17144 reversing-labs
  • RubyGems
    buolder 1.0.3909
    MAL-2026-17143 reversing-labs
  • RubyGems
    buodler 1.0.92627
    MAL-2026-17142 reversing-labs
  • RubyGems
    buodlef 1.0.36814
    MAL-2026-17141 reversing-labs
  • RubyGems
    bunxuer 1.0.33345
    MAL-2026-17140 reversing-labs
  • RubyGems
    bunxlser 1.0.33883
    MAL-2026-17139 reversing-labs
  • RubyGems
    bunxlre 1.0.49729
    MAL-2026-17138 reversing-labs
  • RubyGems
    bunxloer 1.0.10639
    MAL-2026-17137 reversing-labs
  • RubyGems
    bunxlner 1.0.83014
    MAL-2026-17136 reversing-labs
  • RubyGems
    bunxlir 1.0.4602
    MAL-2026-17135 reversing-labs
  • RubyGems
    bunxlers 1.0.89149
    MAL-2026-17134 reversing-labs
  • RubyGems
    bunxlerr 1.0.17961
    MAL-2026-17133 reversing-labs
  • RubyGems
    bunxlerl 1.0.49186
    MAL-2026-17132 reversing-labs
  • RubyGems
    bunxler-rb 1.0.97520
    MAL-2026-17131 reversing-labs
  • RubyGems
    bunxler 1.0.2501
    MAL-2026-17130 reversing-labs
  • RubyGems
    bunxlenr 1.0.49740
    MAL-2026-17129 reversing-labs
  • RubyGems
    bunxlef 1.0.39055
    MAL-2026-17128 reversing-labs
  • RubyGems
    bunuler 1.0.99563
    MAL-2026-17127 reversing-labs