Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,372 npm 223,233 PyPI 11,995 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,372 reports · Feed

  • RubyGems
    blunlder 1.0.0, 1.0.84184
    MAL-2026-16727 reversing-labs
  • RubyGems
    blundler 1.0.0, 1.0.6302
    MAL-2026-16726 reversing-labs
  • RubyGems
    blundlef 1.0.0, 1.0.61792
    MAL-2026-16725 reversing-labs
  • RubyGems
    blumdler 1.0.0, 1.0.70382
    MAL-2026-16724 reversing-labs
  • RubyGems
    bliundler 1.0.0, 1.0.23197
    MAL-2026-16723 reversing-labs
  • RubyGems
    bkundler 1.0.0, 1.0.35404
    MAL-2026-16722 reversing-labs
  • RubyGems
    bjundler 1.0.0, 1.0.86881
    MAL-2026-16721 reversing-labs
  • RubyGems
    bjsndler 1.0.0, 1.0.38595
    MAL-2026-16720 reversing-labs
  • RubyGems
    bjnxler 1.0.0, 1.0.74419
    MAL-2026-16719 reversing-labs
  • RubyGems
    bjnlder 1.0.0, 1.0.30253
    MAL-2026-16718 reversing-labs
  • RubyGems
    bjndler 1.0.0, 1.0.39027
    MAL-2026-16717 reversing-labs
  • RubyGems
    bjndlef 1.0.0, 1.0.1498
    MAL-2026-16716 reversing-labs
  • RubyGems
    bjmdler 1.0.0, 1.0.21950
    MAL-2026-16715 reversing-labs
  • RubyGems
    biyndler 1.0.0, 1.0.84316
    MAL-2026-16714 reversing-labs
  • RubyGems
    biuundler 1.0.0, 1.0.63251
    MAL-2026-16713 reversing-labs
  • RubyGems
    biuudler 1.0.0, 1.0.14997
    MAL-2026-16712 reversing-labs
  • RubyGems
    biusndler 1.0.0, 1.0.11115
    MAL-2026-16711 reversing-labs
  • RubyGems
    biurndler 1.0.0, 1.0.55504
    MAL-2026-16710 reversing-labs
  • RubyGems
    biuondler 1.0.0, 1.0.17676
    MAL-2026-16709 reversing-labs
  • RubyGems
    biuodler 1.0.0, 1.0.56361
    MAL-2026-16708 reversing-labs
  • RubyGems
    biunxler 1.0.0, 1.0.42968
    MAL-2026-16707 reversing-labs
  • RubyGems
    biunuler 1.0.0, 1.0.34652
    MAL-2026-16706 reversing-labs
  • RubyGems
    biunsler 1.0.0, 1.0.48621
    MAL-2026-16705 reversing-labs
  • RubyGems
    biunsdler 1.0.0, 1.0.63182
    MAL-2026-16704 reversing-labs
  • RubyGems
    biunrler 1.0.0, 1.0.18829
    MAL-2026-16703 reversing-labs
  • RubyGems
    biunrdler 1.0.0, 1.0.63228
    MAL-2026-16702 reversing-labs
  • RubyGems
    biunoler 1.0.0, 1.0.62013
    MAL-2026-16701 reversing-labs
  • RubyGems
    biunodler 1.0.0, 1.0.96524
    MAL-2026-16700 reversing-labs
  • RubyGems
    biunndler 1.0.0, 1.0.69117
    MAL-2026-16699 reversing-labs
  • RubyGems
    biunler 1.0.0, 1.0.49760
    MAL-2026-16698 reversing-labs
  • RubyGems
    biunldler 1.0.0, 1.0.58276
    MAL-2026-16697 reversing-labs
  • RubyGems
    biunlder 1.0.0, 1.0.28083
    MAL-2026-16696 reversing-labs
  • RubyGems
    biuniler 1.0.0, 1.0.30789
    MAL-2026-16695 reversing-labs
  • RubyGems
    biunidler 1.0.0, 1.0.64010
    MAL-2026-16694 reversing-labs
  • RubyGems
    biunfler 1.0.0, 1.0.95530
    MAL-2026-16693 reversing-labs
  • RubyGems
    biuneler 1.0.0, 1.0.89370
    MAL-2026-16692 reversing-labs
  • RubyGems
    biunedler 1.0.0, 1.0.93894
    MAL-2026-16691 reversing-labs
  • RubyGems
    biunduer 1.0.0, 1.0.79592
    MAL-2026-16690 reversing-labs
  • RubyGems
    biundsler 1.0.0, 1.0.58735
    MAL-2026-16689 reversing-labs
  • RubyGems
    biundrler 1.0.0, 1.0.25254
    MAL-2026-16688 reversing-labs