Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,371 npm 223,233 PyPI 11,994 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,371 reports · Feed

  • RubyGems
    bundlera 1.0.0, 1.0.55692
    MAL-2026-16966 reversing-labs
  • RubyGems
    bundler-ruby 1.0.88229
    MAL-2026-16965 reversing-labs
  • RubyGems
    bundler-rb 1.0.39010
    MAL-2026-16964 reversing-labs
  • RubyGems
    bundler-lib 1.0.67727
    MAL-2026-16963 reversing-labs
  • RubyGems
    bundleor 1.0.0, 1.0.6167
    MAL-2026-16962 reversing-labs
  • RubyGems
    bundleof 1.0.0, 1.0.98184
    MAL-2026-16961 reversing-labs
  • RubyGems
    bundleo 1.0.0, 1.0.42590
    MAL-2026-16960 reversing-labs
  • RubyGems
    bundlenr 1.0.0, 1.0.78861
    MAL-2026-16959 reversing-labs
  • RubyGems
    bundlenf 1.0.0, 1.0.1319
    MAL-2026-16958 reversing-labs
  • RubyGems
    bundlelr 1.0.0, 1.0.38088
    MAL-2026-16957 reversing-labs
  • RubyGems
    bundlelf 1.0.0, 1.0.4053
    MAL-2026-16956 reversing-labs
  • RubyGems
    bundleir 1.0.0, 1.0.23706
    MAL-2026-16955 reversing-labs
  • RubyGems
    bundleif 1.0.0, 1.0.19460
    MAL-2026-16954 reversing-labs
  • RubyGems
    bundlei 1.0.0, 1.0.61624
    MAL-2026-16953 reversing-labs
  • RubyGems
    bundleg 1.0.0, 1.0.45643
    MAL-2026-16952 reversing-labs
  • RubyGems
    bundlefs 1.0.0, 1.0.49656
    MAL-2026-16951 reversing-labs
  • RubyGems
    bundlefr 1.0.0, 1.0.72259
    MAL-2026-16950 reversing-labs
  • RubyGems
    bundlefo 1.0.0, 1.0.99406
    MAL-2026-16949 reversing-labs
  • RubyGems
    bundlefn 1.0.0, 1.0.64016
    MAL-2026-16948 reversing-labs
  • RubyGems
    bundlefl 1.0.0, 1.0.14431
    MAL-2026-16947 reversing-labs
  • RubyGems
    bundlefi 1.0.0, 1.0.90625
    MAL-2026-16946 reversing-labs
  • RubyGems
    bundleff 1.0.0, 1.0.26571
    MAL-2026-16945 reversing-labs
  • RubyGems
    bundlefe 1.0.0, 1.0.33577
    MAL-2026-16944 reversing-labs
  • RubyGems
    bundlefa 1.0.0, 1.0.70960
    MAL-2026-16943 reversing-labs
  • RubyGems
    bundlef-ruby 1.0.748
    MAL-2026-16942 reversing-labs
  • RubyGems
    bundlef-rb 1.0.37113
    MAL-2026-16941 reversing-labs
  • RubyGems
    bundlef-lib 1.0.48657
    MAL-2026-16940 reversing-labs
  • RubyGems
    bundlef-gem 1.0.21369
    MAL-2026-16939 reversing-labs
  • RubyGems
    bundlef 1.0.0, 1.0.58293
    MAL-2026-16938 reversing-labs
  • RubyGems
    bundleer 1.0.0, 1.0.40447
    MAL-2026-16937 reversing-labs
  • RubyGems
    bundleef 1.0.0, 1.0.31661
    MAL-2026-16936 reversing-labs
  • RubyGems
    bundlee 1.0.0, 1.0.88079
    MAL-2026-16935 reversing-labs
  • RubyGems
    bundled 1.0.0, 1.0.35762
    MAL-2026-16934 reversing-labs
  • RubyGems
    bundlec 1.0.0, 1.0.70665
    MAL-2026-16933 reversing-labs
  • RubyGems
    bundlear 1.0.0, 1.0.5380
    MAL-2026-16932 reversing-labs
  • RubyGems
    bundleaf 1.0.0, 1.0.47557
    MAL-2026-16931 reversing-labs
  • RubyGems
    bundlea 1.0.0, 1.0.12846
    MAL-2026-16930 reversing-labs
  • RubyGems
    bundldr 1.0.0, 1.0.36771
    MAL-2026-16929 reversing-labs
  • RubyGems
    bundldf 1.0.0, 1.0.6046
    MAL-2026-16928 reversing-labs
  • RubyGems
    bundlar 1.0.0, 1.0.32202
    MAL-2026-16927 reversing-labs