Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,371 npm 223,233 PyPI 11,994 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,371 reports · Feed

  • RubyGems
    bunlded 1.0.64491
    MAL-2026-17046 reversing-labs
  • RubyGems
    bunldear 1.0.41070
    MAL-2026-17045 reversing-labs
  • RubyGems
    bunldea 1.0.93725
    MAL-2026-17044 reversing-labs
  • RubyGems
    bunlde 1.0.43264
    MAL-2026-17043 reversing-labs
  • RubyGems
    bunlddr 1.0.46550
    MAL-2026-17042 reversing-labs
  • RubyGems
    bunldder 1.0.0, 1.0.66720
    MAL-2026-17041 reversing-labs
  • RubyGems
    bunldar 1.0.27847
    MAL-2026-17040 reversing-labs
  • RubyGems
    bunldaer 1.0.0, 1.0.38342
    MAL-2026-17039 reversing-labs
  • RubyGems
    bunlcer 1.0.0, 1.0.57754
    MAL-2026-17038 reversing-labs
  • RubyGems
    bunlaer 1.0.0, 1.0.83494
    MAL-2026-17037 reversing-labs
  • RubyGems
    bunlader 1.0.0, 1.0.53260
    MAL-2026-17036 reversing-labs
  • RubyGems
    bunkder 1.0.0, 1.0.13597
    MAL-2026-17035 reversing-labs
  • RubyGems
    buniler 1.0.0, 1.0.58652
    MAL-2026-17034 reversing-labs
  • RubyGems
    bunilef 1.0.0, 1.0.35791
    MAL-2026-17033 reversing-labs
  • RubyGems
    bunilder 1.0.0, 1.0.9366
    MAL-2026-17032 reversing-labs
  • RubyGems
    bunidler 1.0.0, 1.0.98968
    MAL-2026-17031 reversing-labs
  • RubyGems
    bunidlef 1.0.0, 1.0.59401
    MAL-2026-17030 reversing-labs
  • RubyGems
    bunider 1.0.0, 1.0.75071
    MAL-2026-17029 reversing-labs
  • RubyGems
    bunfler 1.0.0, 1.0.59795
    MAL-2026-17028 reversing-labs
  • RubyGems
    bunflef 1.0.0, 1.0.50040
    MAL-2026-17027 reversing-labs
  • RubyGems
    buneler 1.0.0, 1.0.33228
    MAL-2026-17026 reversing-labs
  • RubyGems
    bunelef 1.0.0, 1.0.34251
    MAL-2026-17025 reversing-labs
  • RubyGems
    bunelder 1.0.0, 1.0.70043
    MAL-2026-17024 reversing-labs
  • RubyGems
    bunedler 1.0.0, 1.0.27999
    MAL-2026-17023 reversing-labs
  • RubyGems
    bunedlef 1.0.0, 1.0.93648
    MAL-2026-17022 reversing-labs
  • RubyGems
    buneder 1.0.0, 1.0.71063
    MAL-2026-17021 reversing-labs
  • RubyGems
    bunduer 1.0.0, 1.0.86833
    MAL-2026-17020 reversing-labs
  • RubyGems
    bunduef 1.0.0, 1.0.17706
    MAL-2026-17019 reversing-labs
  • RubyGems
    bundsler 1.0.0, 1.0.38469
    MAL-2026-17018 reversing-labs
  • RubyGems
    bundslef 1.0.0, 1.0.62386
    MAL-2026-17017 reversing-labs
  • RubyGems
    bundrler 1.0.0, 1.0.23380
    MAL-2026-17016 reversing-labs
  • RubyGems
    bundrlef 1.0.0, 1.0.42444
    MAL-2026-17015 reversing-labs
  • RubyGems
    bundper 1.0.0, 1.0.6071
    MAL-2026-17014 reversing-labs
  • RubyGems
    bundpef 1.0.0, 1.0.7448
    MAL-2026-17013 reversing-labs
  • RubyGems
    bundoler 1.0.0, 1.0.75245
    MAL-2026-17012 reversing-labs
  • RubyGems
    bundolef 1.0.0, 1.0.42312
    MAL-2026-17011 reversing-labs
  • RubyGems
    bundoer 1.0.0, 1.0.35656
    MAL-2026-17010 reversing-labs
  • RubyGems
    bundoef 1.0.0, 1.0.69592
    MAL-2026-17009 reversing-labs
  • RubyGems
    bundnler 1.0.0, 1.0.62208
    MAL-2026-17008 reversing-labs
  • RubyGems
    bundnlef 1.0.0, 1.0.36235
    MAL-2026-17007 reversing-labs