Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,371 npm 223,233 PyPI 11,994 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,371 reports · Feed

  • RubyGems
    bummdler 1.0.0, 1.0.74928
    MAL-2026-16886 reversing-labs
  • RubyGems
    bumler 1.0.0, 1.0.60219
    MAL-2026-16885 reversing-labs
  • RubyGems
    bumldler 1.0.0, 1.0.94213
    MAL-2026-16884 reversing-labs
  • RubyGems
    bumlder 1.0.0, 1.0.46137
    MAL-2026-16883 reversing-labs
  • RubyGems
    bumiler 1.0.0, 1.0.31193
    MAL-2026-16882 reversing-labs
  • RubyGems
    bumidler 1.0.0, 1.0.64617
    MAL-2026-16881 reversing-labs
  • RubyGems
    bumfler 1.0.0, 1.0.22213
    MAL-2026-16880 reversing-labs
  • RubyGems
    bumeler 1.0.0, 1.0.75379
    MAL-2026-16879 reversing-labs
  • RubyGems
    bumedler 1.0.0, 1.0.68736
    MAL-2026-16878 reversing-labs
  • RubyGems
    bumduer 1.0.0, 1.0.5701
    MAL-2026-16877 reversing-labs
  • RubyGems
    bumdsler 1.0.0, 1.0.95833
    MAL-2026-16876 reversing-labs
  • RubyGems
    bumdrler 1.0.0, 1.0.28751
    MAL-2026-16875 reversing-labs
  • RubyGems
    bumdper 1.0.0, 1.0.11644
    MAL-2026-16874 reversing-labs
  • RubyGems
    bumdoler 1.0.0, 1.0.83715
    MAL-2026-16873 reversing-labs
  • RubyGems
    bumdoer 1.0.0, 1.0.79467
    MAL-2026-16872 reversing-labs
  • RubyGems
    bumdnler 1.0.0, 1.0.50246
    MAL-2026-16871 reversing-labs
  • RubyGems
    bumdlwr 1.0.0, 1.0.55982
    MAL-2026-16870 reversing-labs
  • RubyGems
    bumdlur 1.0.0, 1.0.37352
    MAL-2026-16869 reversing-labs
  • RubyGems
    bumdlsr 1.0.0, 1.0.53575
    MAL-2026-16868 reversing-labs
  • RubyGems
    bumdlser 1.0.0, 1.0.45583
    MAL-2026-16867 reversing-labs
  • RubyGems
    bumdlrr 1.0.0, 1.0.42672
    MAL-2026-16866 reversing-labs
  • RubyGems
    bumdlrer 1.0.0, 1.0.53888
    MAL-2026-16865 reversing-labs
  • RubyGems
    bumdlre 1.0.0, 1.0.71695
    MAL-2026-16864 reversing-labs
  • RubyGems
    bumdlr 1.0.0, 1.0.71801
    MAL-2026-16863 reversing-labs
  • RubyGems
    bumdlor 1.0.0, 1.0.11353
    MAL-2026-16862 reversing-labs
  • RubyGems
    bumdloer 1.0.0, 1.0.35751
    MAL-2026-16861 reversing-labs
  • RubyGems
    bumdlner 1.0.0, 1.0.81514
    MAL-2026-16860 reversing-labs
  • RubyGems
    bumdller 1.0.0, 1.0.15074
    MAL-2026-16859 reversing-labs
  • RubyGems
    bumdlir 1.0.0, 1.0.54183
    MAL-2026-16858 reversing-labs
  • RubyGems
    bumdlier 1.0.0, 1.0.52451
    MAL-2026-16857 reversing-labs
  • RubyGems
    bumdleu 1.0.0, 1.0.2876
    MAL-2026-16856 reversing-labs
  • RubyGems
    bumdlet 1.0.0, 1.0.53272
    MAL-2026-16855 reversing-labs
  • RubyGems
    bumdlesr 1.0.0, 1.0.29696
    MAL-2026-16854 reversing-labs
  • RubyGems
    bumdlers 1.0.0, 1.0.10387
    MAL-2026-16853 reversing-labs
  • RubyGems
    bumdlerr 1.0.0, 1.0.98484
    MAL-2026-16852 reversing-labs
  • RubyGems
    bumdlero 1.0.0, 1.0.92124
    MAL-2026-16851 reversing-labs
  • RubyGems
    bumdlern 1.0.0, 1.0.94748
    MAL-2026-16850 reversing-labs
  • RubyGems
    bumdlerl 1.0.0, 1.0.57234
    MAL-2026-16849 reversing-labs
  • RubyGems
    bumdleri 1.0.0, 1.0.25816
    MAL-2026-16848 reversing-labs
  • RubyGems
    bumdlere 1.0.0, 1.0.50974
    MAL-2026-16847 reversing-labs