Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,371 npm 223,233 PyPI 11,994 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,371 reports · Feed

  • RubyGems
    bundlaf 1.0.0, 1.0.66618
    MAL-2026-16926 reversing-labs
  • RubyGems
    bundlaer 1.0.0, 1.0.56863
    MAL-2026-16925 reversing-labs
  • RubyGems
    bundlaef 1.0.0, 1.0.44794
    MAL-2026-16924 reversing-labs
  • RubyGems
    bundker 1.0.0, 1.0.51667
    MAL-2026-16923 reversing-labs
  • RubyGems
    bundkef 1.0.0, 1.0.40256
    MAL-2026-16922 reversing-labs
  • RubyGems
    bundiler 1.0.0, 1.0.11299
    MAL-2026-16921 reversing-labs
  • RubyGems
    bundilef 1.0.0, 1.0.5365
    MAL-2026-16920 reversing-labs
  • RubyGems
    bundier 1.0.0, 1.0.14195
    MAL-2026-16919 reversing-labs
  • RubyGems
    bundief 1.0.0, 1.0.97150
    MAL-2026-16918 reversing-labs
  • RubyGems
    bunder 1.0.0, 1.0.29686
    MAL-2026-16917 reversing-labs
  • RubyGems
    bundelr 0.0.1, 1.0.81442
    MAL-2026-16916 reversing-labs
  • RubyGems
    bundelf 1.0.0, 1.0.17362
    MAL-2026-16915 reversing-labs
  • RubyGems
    bundeler 1.0.0, 1.0.77245
    MAL-2026-16914 reversing-labs
  • RubyGems
    bundelef 1.0.0, 1.0.14274
    MAL-2026-16913 reversing-labs
  • RubyGems
    bundef 1.0.0, 1.0.78938
    MAL-2026-16912 reversing-labs
  • RubyGems
    bundeer 1.0.0, 1.0.17600
    MAL-2026-16911 reversing-labs
  • RubyGems
    bundeef 1.0.0, 1.0.71470
    MAL-2026-16910 reversing-labs
  • RubyGems
    bunddler 1.0.0, 1.0.45929
    MAL-2026-16909 reversing-labs
  • RubyGems
    bunddlef 1.0.0, 1.0.12649
    MAL-2026-16908 reversing-labs
  • RubyGems
    bundaler 1.0.0, 1.0.97385
    MAL-2026-16907 reversing-labs
  • RubyGems
    bundalef 1.0.0, 1.0.54597
    MAL-2026-16906 reversing-labs
  • RubyGems
    bundaer 1.0.0, 1.0.92631
    MAL-2026-16905 reversing-labs
  • RubyGems
    bundaef 1.0.0, 1.0.64189
    MAL-2026-16904 reversing-labs
  • RubyGems
    buncler 1.0.0, 1.0.33420
    MAL-2026-16903 reversing-labs
  • RubyGems
    bunclef 1.0.0, 1.0.55168
    MAL-2026-16902 reversing-labs
  • RubyGems
    bunaler 1.0.0, 1.0.66996
    MAL-2026-16901 reversing-labs
  • RubyGems
    bunalef 1.0.0, 1.0.77903
    MAL-2026-16900 reversing-labs
  • RubyGems
    bunalder 1.0.0, 1.0.30181
    MAL-2026-16899 reversing-labs
  • RubyGems
    bunadler 1.0.0, 1.0.17618
    MAL-2026-16898 reversing-labs
  • RubyGems
    bunadlef 1.0.0, 1.0.95479
    MAL-2026-16897 reversing-labs
  • RubyGems
    bunader 1.0.0, 1.0.83765
    MAL-2026-16896 reversing-labs
  • RubyGems
    bumxler 1.0.0, 1.0.49666
    MAL-2026-16895 reversing-labs
  • RubyGems
    bumuler 1.0.0, 1.0.41410
    MAL-2026-16894 reversing-labs
  • RubyGems
    bumsler 1.0.0, 1.0.79291
    MAL-2026-16893 reversing-labs
  • RubyGems
    bumsdler 1.0.0, 1.0.96106
    MAL-2026-16892 reversing-labs
  • RubyGems
    bumrler 1.0.0, 1.0.57453
    MAL-2026-16891 reversing-labs
  • RubyGems
    bumrdler 1.0.0, 1.0.30940
    MAL-2026-16890 reversing-labs
  • RubyGems
    bumoler 1.0.0, 1.0.72706
    MAL-2026-16889 reversing-labs
  • RubyGems
    bumodler 1.0.0, 1.0.36008
    MAL-2026-16888 reversing-labs
  • RubyGems
    bumndler 1.0.0, 1.0.17427
    MAL-2026-16887 reversing-labs