Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,345 npm 223,208 PyPI 11,993 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,345 reports · Feed

  • npm
    @touchkey0111/jito-bundle all versions
    MAL-2026-18588 ghsa-malware
  • npm
    arbkit all versions
    MAL-2026-18585 ghsa-malware
  • PyPI
    ln9qw38745g 0.1.0, 0.1.1
    MAL-2026-18583 kam193
  • PyPI
    protecteda 0.1.0
    MAL-2026-18584 kam193
  • npm
    txnforge all versions
    MAL-2026-18587 ghsa-malware
  • npm
    print-hello-world-test-temp all versions
    MAL-2026-18586 ghsa-malware
  • PyPI
    zyto 0.2.0, 0.2.1, 0.2.2, 0.2.3
    MAL-2026-18582 kam193
  • PyPI
    hijuko-pilara 1.0.0
    MAL-2026-18581 kam193 4 IOCs
  • PyPI
    filipt 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.4, 0.1.5
    MAL-2026-18580 kam193, amazon-inspector
  • npm
    y0syoh all versions
    MAL-2026-18578 ghsa-malware
  • npm
    wyrj3i all versions
    MAL-2026-18577 ghsa-malware
  • npm
    wxmzfq all versions
    MAL-2026-18576 ghsa-malware
  • npm
    wolce9 all versions
    MAL-2026-18574 ghsa-malware
  • npm
    v36sl2 all versions
    MAL-2026-18572 ghsa-malware
  • npm
    t6unrv all versions
    MAL-2026-18565 ghsa-malware
  • npm
    sgj0kx all versions
    MAL-2026-18564 ghsa-malware
  • npm
    s775oe all versions
    MAL-2026-18563 ghsa-malware
  • npm
    ru0z83 all versions
    MAL-2026-18562 ghsa-malware
  • npm
    rtvu6h all versions
    MAL-2026-18561 ghsa-malware
  • npm
    qxjf8r all versions
    MAL-2026-18559 ghsa-malware
  • npm
    ll3zea all versions
    MAL-2026-18552 ghsa-malware
  • npm
    kojs0k all versions
    MAL-2026-18549 ghsa-malware
  • npm
    jd7ijw all versions
    MAL-2026-18547 ghsa-malware
  • npm
    j4pe0w all versions
    MAL-2026-18545 ghsa-malware
  • npm
    ib3rwn all versions
    MAL-2026-18544 ghsa-malware
  • npm
    gvmabc all versions
    MAL-2026-18543 ghsa-malware
  • npm
    g3ypjg all versions
    MAL-2026-18540 ghsa-malware
  • npm
    bznio5 all versions
    MAL-2026-18538 ghsa-malware
  • npm
    7un7kh all versions
    MAL-2026-18535 ghsa-malware
  • npm
    5df897 all versions
    MAL-2026-18534 ghsa-malware
  • npm
    3zqth8 all versions
    MAL-2026-18533 ghsa-malware
  • npm
    2tyegs all versions
    MAL-2026-18532 ghsa-malware
  • npm
    yhk9j0 all versions
    MAL-2026-18579 ghsa-malware
  • npm
    working-today--empire-takeover-h-a-c-k-gen-erat-or-akcp8z all versions
    MAL-2026-18575 ghsa-malware
  • npm
    winjb6 all versions
    MAL-2026-18573 ghsa-malware
  • npm
    updated-today-gen-photo-lab-pro-h-a-c-k-gen-erat-or-ofgpju all versions
    MAL-2026-18571 ghsa-malware
  • npm
    updated-today-gen-dr-parking-4-h-a-c-k-gen-erat-or-hmdcsa all versions
    MAL-2026-18570 ghsa-malware
  • npm
    updated-gen-erator-rainbow-six-mobile-h-a-c-k-gen-erat-or-1179lh all versions
    MAL-2026-18569 ghsa-malware
  • npm
    updated-gen-erator-producer-h-a-c-k-gen-erat-or-g8pi55 all versions
    MAL-2026-18568 ghsa-malware
  • npm
    u0bh1f all versions
    MAL-2026-18566 ghsa-malware