Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,372 npm 223,233 PyPI 11,995 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,372 reports · Feed

  • RubyGems
    bualder 1.0.0, 1.0.13022
    MAL-2026-16767 reversing-labs
  • RubyGems
    buadler 1.0.0, 1.0.43648
    MAL-2026-16766 reversing-labs
  • RubyGems
    buadlef 1.0.0, 1.0.41912
    MAL-2026-16765 reversing-labs
  • RubyGems
    bsusndler 1.0.0, 1.0.49085
    MAL-2026-16764 reversing-labs
  • RubyGems
    bsunlder 1.0.0, 1.0.12818
    MAL-2026-16763 reversing-labs
  • RubyGems
    bsundler 1.0.0, 1.0.87539
    MAL-2026-16762 reversing-labs
  • RubyGems
    bsundlef 1.0.0, 1.0.40107
    MAL-2026-16761 reversing-labs
  • RubyGems
    bsumdler 1.0.0, 1.0.38207
    MAL-2026-16760 reversing-labs
  • RubyGems
    bsndler 1.0.0, 1.0.70678
    MAL-2026-16759 reversing-labs
  • RubyGems
    bsiundler 1.0.0, 1.0.22853
    MAL-2026-16758 reversing-labs
  • RubyGems
    brusndler 1.0.0, 1.0.98237
    MAL-2026-16757 reversing-labs
  • RubyGems
    brunlder 1.0.0, 1.0.95238
    MAL-2026-16756 reversing-labs
  • RubyGems
    brundler 1.0.0, 1.0.89920
    MAL-2026-16755 reversing-labs
  • RubyGems
    brundlef 1.0.0, 1.0.34091, 1.0.37871
    MAL-2026-16754 reversing-labs
  • RubyGems
    briundler 1.0.0, 1.0.63768
    MAL-2026-16753 reversing-labs
  • RubyGems
    bousndler 1.0.0, 1.0.82236
    MAL-2026-16752 reversing-labs
  • RubyGems
    bounlder 1.0.0, 1.0.77039
    MAL-2026-16751 reversing-labs
  • RubyGems
    boundler 1.0.0, 1.0.18827
    MAL-2026-16750 reversing-labs
  • RubyGems
    boundlef 1.0.0, 1.0.86388
    MAL-2026-16749 reversing-labs
  • RubyGems
    boumdler 1.0.0, 1.0.9579
    MAL-2026-16748 reversing-labs
  • RubyGems
    bosndler 1.0.0, 1.0.83935
    MAL-2026-16747 reversing-labs
  • RubyGems
    bonlder 1.0.0, 1.0.96437
    MAL-2026-16746 reversing-labs
  • RubyGems
    bondler 1.0.0, 1.0.63698
    MAL-2026-16745 reversing-labs
  • RubyGems
    bondlef 1.0.0, 1.0.96740
    MAL-2026-16744 reversing-labs
  • RubyGems
    bomdler 1.0.0, 1.0.915
    MAL-2026-16743 reversing-labs
  • RubyGems
    boiundler 1.0.0, 1.0.35714
    MAL-2026-16742 reversing-labs
  • RubyGems
    bnusndler 1.0.0, 1.0.13149
    MAL-2026-16741 reversing-labs
  • RubyGems
    bnunlder 1.0.0, 1.0.40495
    MAL-2026-16740 reversing-labs
  • RubyGems
    bnundler 1.0.0, 1.0.81828
    MAL-2026-16739 reversing-labs
  • RubyGems
    bnundlef 1.0.0, 1.0.55050
    MAL-2026-16738 reversing-labs
  • RubyGems
    bnumdler 1.0.0, 1.0.11770
    MAL-2026-16737 reversing-labs
  • RubyGems
    bnulder 1.0.0, 1.0.69920
    MAL-2026-16736 reversing-labs
  • RubyGems
    bnudler 1.0.0, 1.0.5413
    MAL-2026-16735 reversing-labs
  • RubyGems
    bnudlef 1.0.0, 1.0.53800
    MAL-2026-16734 reversing-labs
  • RubyGems
    bnlder 1.0.0, 1.0.57005
    MAL-2026-16733 reversing-labs
  • RubyGems
    bniundler 1.0.0, 1.0.83252
    MAL-2026-16732 reversing-labs
  • RubyGems
    bndlef 1.0.0, 1.0.7428
    MAL-2026-16731 reversing-labs
  • RubyGems
    bmudler 1.0.0, 1.0.60397
    MAL-2026-16730 reversing-labs
  • RubyGems
    bmdler 1.0.0, 1.0.64535
    MAL-2026-16729 reversing-labs
  • RubyGems
    blusndler 1.0.0, 1.0.8984
    MAL-2026-16728 reversing-labs