Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,371 npm 223,233 PyPI 11,994 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,371 reports · Feed

  • RubyGems
    bulmdler 1.0.0, 1.0.47151
    MAL-2026-16806 reversing-labs
  • RubyGems
    bulder 1.0.0, 1.0.96494
    MAL-2026-16805 reversing-labs
  • RubyGems
    bukdler 1.0.0, 1.0.76040
    MAL-2026-16804 reversing-labs
  • RubyGems
    bujlder 1.0.0, 1.0.2736
    MAL-2026-16803 reversing-labs
  • RubyGems
    bujdler 1.0.0, 1.0.63942
    MAL-2026-16802 reversing-labs
  • RubyGems
    bujdlef 1.0.0, 1.0.38999
    MAL-2026-16801 reversing-labs
  • RubyGems
    buisndler 1.0.0, 1.0.58899
    MAL-2026-16800 reversing-labs
  • RubyGems
    buinxler 1.0.0, 1.0.68994
    MAL-2026-16799 reversing-labs
  • RubyGems
    buinlder 1.0.0, 1.0.97187
    MAL-2026-16798 reversing-labs
  • RubyGems
    buindler 1.0.0, 1.0.61274
    MAL-2026-16797 reversing-labs
  • RubyGems
    buindlef 1.0.0, 1.0.81569
    MAL-2026-16796 reversing-labs
  • RubyGems
    buimdler 1.0.0, 1.0.2891
    MAL-2026-16795 reversing-labs
  • RubyGems
    buidler 1.0.0, 1.0.29476
    MAL-2026-16794 reversing-labs
  • RubyGems
    buidlef 1.0.0, 1.0.72589
    MAL-2026-16793 reversing-labs
  • RubyGems
    buhlder 1.0.0, 1.0.60605
    MAL-2026-16792 reversing-labs
  • RubyGems
    buhdler 1.0.0, 1.0.24533
    MAL-2026-16791 reversing-labs
  • RubyGems
    buhdlef 1.0.0, 1.0.93541
    MAL-2026-16790 reversing-labs
  • RubyGems
    buesndler 1.0.0, 1.0.48043
    MAL-2026-16789 reversing-labs
  • RubyGems
    buenlder 1.0.0, 1.0.41769
    MAL-2026-16788 reversing-labs
  • RubyGems
    buendler 1.0.0, 1.0.35062
    MAL-2026-16787 reversing-labs
  • RubyGems
    buendlef 1.0.0, 1.0.27486
    MAL-2026-16786 reversing-labs
  • RubyGems
    buemdler 1.0.0, 1.0.65910
    MAL-2026-16785 reversing-labs
  • RubyGems
    buelder 1.0.0, 1.0.3977
    MAL-2026-16784 reversing-labs
  • RubyGems
    buedler 1.0.0, 1.0.10587
    MAL-2026-16783 reversing-labs
  • RubyGems
    buedlef 1.0.0, 1.0.82457
    MAL-2026-16782 reversing-labs
  • RubyGems
    budnler 1.0.87205, 1000.0.0
    MAL-2026-16781 reversing-labs
  • RubyGems
    budnlef 1.0.0, 1.0.43999
    MAL-2026-16780 reversing-labs
  • RubyGems
    budndler 1.0.0, 1.0.97463
    MAL-2026-16779 reversing-labs
  • RubyGems
    budmler 1.0.0, 1.0.28587
    MAL-2026-16778 reversing-labs
  • RubyGems
    budler 1.0.60354, 1000.0.0
    MAL-2026-16777 reversing-labs
  • RubyGems
    budlef 1.0.0, 1.0.42684
    MAL-2026-16776 reversing-labs
  • RubyGems
    bublder 1.0.0, 1.0.62205
    MAL-2026-16775 reversing-labs
  • RubyGems
    bubdler 1.0.0, 1.0.68402
    MAL-2026-16774 reversing-labs
  • RubyGems
    bubdlef 1.0.0, 1.0.42399
    MAL-2026-16773 reversing-labs
  • RubyGems
    buasndler 1.0.0, 1.0.86691
    MAL-2026-16772 reversing-labs
  • RubyGems
    buanlder 1.0.0, 1.0.81552
    MAL-2026-16771 reversing-labs
  • RubyGems
    buandler 1.0.0, 1.0.63376
    MAL-2026-16770 reversing-labs
  • RubyGems
    buandlef 1.0.0, 1.0.56849
    MAL-2026-16769 reversing-labs
  • RubyGems
    buamdler 1.0.0, 1.0.80877
    MAL-2026-16768 reversing-labs
  • RubyGems
    bualder 1.0.0, 1.0.13022
    MAL-2026-16767 reversing-labs