Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,371 npm 223,233 PyPI 11,994 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,371 reports · Feed

  • RubyGems
    bumdlera 1.0.0, 1.0.30716
    MAL-2026-16846 reversing-labs
  • RubyGems
    bumdler-ruby 1.0.39941
    MAL-2026-16845 reversing-labs
  • RubyGems
    bumdler-rb 1.0.44242
    MAL-2026-16844 reversing-labs
  • RubyGems
    bumdler-lib 1.0.49474
    MAL-2026-16843 reversing-labs
  • RubyGems
    bumdler-gem 1.0.34790
    MAL-2026-16842 reversing-labs
  • RubyGems
    bumdler 1.0.76752, 1000.0.0
    MAL-2026-16841 reversing-labs
  • RubyGems
    bumdleor 1.0.0, 1.0.84313
    MAL-2026-16840 reversing-labs
  • RubyGems
    bumdleo 1.0.0, 1.0.35386
    MAL-2026-16839 reversing-labs
  • RubyGems
    bumdlenr 1.0.0, 1.0.19828
    MAL-2026-16838 reversing-labs
  • RubyGems
    bumdlelr 1.0.0, 1.0.61495
    MAL-2026-16837 reversing-labs
  • RubyGems
    bumdleir 1.0.0, 1.0.35887
    MAL-2026-16836 reversing-labs
  • RubyGems
    bumdlei 1.0.0, 1.0.49724
    MAL-2026-16835 reversing-labs
  • RubyGems
    bumdlef 1.0.0, 1.0.17996
    MAL-2026-16834 reversing-labs
  • RubyGems
    bumdleer 1.0.0, 1.0.27473
    MAL-2026-16833 reversing-labs
  • RubyGems
    bumdlee 1.0.0, 1.0.9819
    MAL-2026-16832 reversing-labs
  • RubyGems
    bumdled 1.0.0, 1.0.55997
    MAL-2026-16831 reversing-labs
  • RubyGems
    bumdlear 1.0.0, 1.0.41693
    MAL-2026-16830 reversing-labs
  • RubyGems
    bumdlea 1.0.0, 1.0.79269
    MAL-2026-16829 reversing-labs
  • RubyGems
    bumdle 1.0.0, 1.0.64850
    MAL-2026-16828 reversing-labs
  • RubyGems
    bumdldr 1.0.0, 1.0.92554
    MAL-2026-16827 reversing-labs
  • RubyGems
    bumdlar 1.0.0, 1.0.16239
    MAL-2026-16826 reversing-labs
  • RubyGems
    bumdlaer 1.0.0, 1.0.13733
    MAL-2026-16825 reversing-labs
  • RubyGems
    bumdker 1.0.0, 1.0.13992
    MAL-2026-16824 reversing-labs
  • RubyGems
    bumdiler 1.0.0, 1.0.41131
    MAL-2026-16823 reversing-labs
  • RubyGems
    bumdier 1.0.0, 1.0.93212
    MAL-2026-16822 reversing-labs
  • RubyGems
    bumder 1.0.0, 1.0.19715
    MAL-2026-16821 reversing-labs
  • RubyGems
    bumdelr 1.0.0, 1.0.8883
    MAL-2026-16820 reversing-labs
  • RubyGems
    bumdeler 1.0.0, 1.0.35313
    MAL-2026-16819 reversing-labs
  • RubyGems
    bumdeer 1.0.0, 1.0.62802
    MAL-2026-16818 reversing-labs
  • RubyGems
    bumddler 1.0.0, 1.0.98960
    MAL-2026-16817 reversing-labs
  • RubyGems
    bumdaler 1.0.0, 1.0.78609
    MAL-2026-16816 reversing-labs
  • RubyGems
    bumdaer 1.0.0, 1.0.52907
    MAL-2026-16815 reversing-labs
  • RubyGems
    bumcler 1.0.0, 1.0.13154
    MAL-2026-16814 reversing-labs
  • RubyGems
    bumaler 1.0.0, 1.0.34418
    MAL-2026-16813 reversing-labs
  • RubyGems
    bumadler 1.0.0, 1.0.74956
    MAL-2026-16812 reversing-labs
  • RubyGems
    bulsndler 1.0.0, 1.0.22663
    MAL-2026-16811 reversing-labs
  • RubyGems
    bulnlder 1.0.0, 1.0.22718
    MAL-2026-16810 reversing-labs
  • RubyGems
    bulndler 1.0.0, 1.0.51336
    MAL-2026-16809 reversing-labs
  • RubyGems
    bulndlef 1.0.0, 1.0.64405
    MAL-2026-16808 reversing-labs
  • RubyGems
    bulnder 1.0.95050
    MAL-2026-16807 reversing-labs