Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,371 npm 223,233 PyPI 11,994 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,371 reports · Feed

  • RubyGems
    bunulef 1.0.44288
    MAL-2026-17126 reversing-labs
  • RubyGems
    bunuder 1.0.43564
    MAL-2026-17125 reversing-labs
  • RubyGems
    bunsndler 1.0.90315
    MAL-2026-17124 reversing-labs
  • RubyGems
    bunsler 1.0.47401
    MAL-2026-17123 reversing-labs
  • RubyGems
    bunslef 1.0.26074
    MAL-2026-17122 reversing-labs
  • RubyGems
    bunslder 1.0.58403
    MAL-2026-17121 reversing-labs
  • RubyGems
    bunsdler 1.0.76068
    MAL-2026-17120 reversing-labs
  • RubyGems
    bunsdlef 1.0.21638
    MAL-2026-17119 reversing-labs
  • RubyGems
    bunrler 1.0.1802
    MAL-2026-17118 reversing-labs
  • RubyGems
    bunrlef 1.0.47893
    MAL-2026-17117 reversing-labs
  • RubyGems
    bunrlder 1.0.8611
    MAL-2026-17116 reversing-labs
  • RubyGems
    bunrdler 1.0.26539
    MAL-2026-17115 reversing-labs
  • RubyGems
    bunrdlef 1.0.4799
    MAL-2026-17114 reversing-labs
  • RubyGems
    bunpder 1.0.76365
    MAL-2026-17113 reversing-labs
  • RubyGems
    bunoler 1.0.68082
    MAL-2026-17112 reversing-labs
  • RubyGems
    bunolef 1.0.41872
    MAL-2026-17111 reversing-labs
  • RubyGems
    bunolder 1.0.38341
    MAL-2026-17110 reversing-labs
  • RubyGems
    bunodler 1.0.3683
    MAL-2026-17109 reversing-labs
  • RubyGems
    bunodlef 1.0.54605
    MAL-2026-17108 reversing-labs
  • RubyGems
    bunoder 1.0.71936
    MAL-2026-17107 reversing-labs
  • RubyGems
    bunnxler 1.0.31113
    MAL-2026-17106 reversing-labs
  • RubyGems
    bunnlder 1.0.20661
    MAL-2026-17105 reversing-labs
  • RubyGems
    bunndler 1.0.77086, 1000.0.0
    MAL-2026-17104 reversing-labs
  • RubyGems
    bunndlef 1.0.86049
    MAL-2026-17103 reversing-labs
  • RubyGems
    bunmdler 1.0.70310
    MAL-2026-17102 reversing-labs
  • RubyGems
    bunlxer 1.0.38042
    MAL-2026-17101 reversing-labs
  • RubyGems
    bunluer 1.0.32134
    MAL-2026-17100 reversing-labs
  • RubyGems
    bunlser 1.0.90438
    MAL-2026-17099 reversing-labs
  • RubyGems
    bunlrer 1.0.45668
    MAL-2026-17098 reversing-labs
  • RubyGems
    bunlrder 1.0.71479
    MAL-2026-17097 reversing-labs
  • RubyGems
    bunloer 1.0.42509
    MAL-2026-17096 reversing-labs
  • RubyGems
    bunloder 1.0.96173
    MAL-2026-17095 reversing-labs
  • RubyGems
    bunlnder 1.0.52173
    MAL-2026-17094 reversing-labs
  • RubyGems
    bunllder 1.0.32591
    MAL-2026-17093 reversing-labs
  • RubyGems
    bunlier 1.0.35534
    MAL-2026-17092 reversing-labs
  • RubyGems
    bunlider 1.0.53181
    MAL-2026-17091 reversing-labs
  • RubyGems
    bunlfer 1.0.5684
    MAL-2026-17090 reversing-labs
  • RubyGems
    bunler 1.0.36464
    MAL-2026-17089 reversing-labs
  • RubyGems
    bunlef 1.0.55825
    MAL-2026-17088 reversing-labs
  • RubyGems
    bunleer 1.0.13048
    MAL-2026-17087 reversing-labs