Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,371 npm 223,233 PyPI 11,994 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,371 reports · Feed

  • RubyGems
    bunledr 1.0.96045
    MAL-2026-17086 reversing-labs
  • RubyGems
    bunleder 1.0.70940
    MAL-2026-17085 reversing-labs
  • RubyGems
    bunldwr 1.0.93746
    MAL-2026-17084 reversing-labs
  • RubyGems
    bunldur 1.0.63445
    MAL-2026-17083 reversing-labs
  • RubyGems
    bunldsr 1.0.98458
    MAL-2026-17082 reversing-labs
  • RubyGems
    bunldser 1.0.60801
    MAL-2026-17081 reversing-labs
  • RubyGems
    bunldrr 1.0.18931
    MAL-2026-17080 reversing-labs
  • RubyGems
    bunldrer 1.0.43130
    MAL-2026-17079 reversing-labs
  • RubyGems
    bunldre 1.0.4024
    MAL-2026-17078 reversing-labs
  • RubyGems
    bunldr 1.0.15959
    MAL-2026-17077 reversing-labs
  • RubyGems
    bunldor 1.0.55408
    MAL-2026-17076 reversing-labs
  • RubyGems
    bunldoer 1.0.73882
    MAL-2026-17075 reversing-labs
  • RubyGems
    bunldner 1.0.35572
    MAL-2026-17074 reversing-labs
  • RubyGems
    bunldler 1.0.84626
    MAL-2026-17073 reversing-labs
  • RubyGems
    bunldlef 1.0.15507
    MAL-2026-17072 reversing-labs
  • RubyGems
    bunldir 1.0.8637
    MAL-2026-17071 reversing-labs
  • RubyGems
    bunldier 1.0.35358
    MAL-2026-17070 reversing-labs
  • RubyGems
    bunldet 1.0.58081
    MAL-2026-17069 reversing-labs
  • RubyGems
    bunldesr 1.0.51389
    MAL-2026-17068 reversing-labs
  • RubyGems
    bunlders 1.0.23139
    MAL-2026-17067 reversing-labs
  • RubyGems
    bunlderr 1.0.6495
    MAL-2026-17066 reversing-labs
  • RubyGems
    bunldero 1.0.48694
    MAL-2026-17065 reversing-labs
  • RubyGems
    bunldern 1.0.99614
    MAL-2026-17064 reversing-labs
  • RubyGems
    bunlderl 1.0.85292
    MAL-2026-17063 reversing-labs
  • RubyGems
    bunlderi 1.0.67493
    MAL-2026-17062 reversing-labs
  • RubyGems
    bunldere 1.0.4640
    MAL-2026-17061 reversing-labs
  • RubyGems
    bunldera 1.0.19339
    MAL-2026-17060 reversing-labs
  • RubyGems
    bunlder-ruby 1.0.25807
    MAL-2026-17059 reversing-labs
  • RubyGems
    bunlder-rb 1.0.42332
    MAL-2026-17058 reversing-labs
  • RubyGems
    bunlder-lib 1.0.32275
    MAL-2026-17057 reversing-labs
  • RubyGems
    bunlder-gem 1.0.50306
    MAL-2026-17056 reversing-labs
  • RubyGems
    bunldeor 1.0.25151
    MAL-2026-17055 reversing-labs
  • RubyGems
    bunldeo 1.0.99624
    MAL-2026-17054 reversing-labs
  • RubyGems
    bunldenr 1.0.79738
    MAL-2026-17053 reversing-labs
  • RubyGems
    bunldelr 1.0.93815
    MAL-2026-17052 reversing-labs
  • RubyGems
    bunldeir 1.0.94881
    MAL-2026-17051 reversing-labs
  • RubyGems
    bunldei 1.0.73501
    MAL-2026-17050 reversing-labs
  • RubyGems
    bunldef 1.0.21386
    MAL-2026-17049 reversing-labs
  • RubyGems
    bunldeer 1.0.28811
    MAL-2026-17048 reversing-labs
  • RubyGems
    bunldee 1.0.53829
    MAL-2026-17047 reversing-labs