Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,372 npm 223,233 PyPI 11,995 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,372 reports · Feed

  • RubyGems
    biundper 1.0.0, 1.0.32876
    MAL-2026-16687 reversing-labs
  • RubyGems
    biundoler 1.0.0, 1.0.85319
    MAL-2026-16686 reversing-labs
  • RubyGems
    biundoer 1.0.0, 1.0.27631
    MAL-2026-16685 reversing-labs
  • RubyGems
    biundnler 1.0.0, 1.0.47296
    MAL-2026-16684 reversing-labs
  • RubyGems
    biundlwr 1.0.0, 1.0.37855
    MAL-2026-16683 reversing-labs
  • RubyGems
    biundlur 1.0.0, 1.0.54533
    MAL-2026-16682 reversing-labs
  • RubyGems
    biundlsr 1.0.0, 1.0.25965
    MAL-2026-16681 reversing-labs
  • RubyGems
    biundlser 1.0.0, 1.0.81375
    MAL-2026-16680 reversing-labs
  • RubyGems
    biundlrr 1.0.0, 1.0.8442
    MAL-2026-16679 reversing-labs
  • RubyGems
    biundlrer 1.0.0, 1.0.1339
    MAL-2026-16678 reversing-labs
  • RubyGems
    biundlre 1.0.0, 1.0.53070
    MAL-2026-16677 reversing-labs
  • RubyGems
    biundlr 1.0.0, 1.0.33044
    MAL-2026-16676 reversing-labs
  • RubyGems
    biundlor 1.0.0, 1.0.39659
    MAL-2026-16675 reversing-labs
  • RubyGems
    biundloer 1.0.0, 1.0.10959
    MAL-2026-16674 reversing-labs
  • RubyGems
    biundlner 1.0.0, 1.0.90247
    MAL-2026-16673 reversing-labs
  • RubyGems
    biundller 1.0.0, 1.0.81848
    MAL-2026-16672 reversing-labs
  • RubyGems
    biundlir 1.0.0, 1.0.23108
    MAL-2026-16671 reversing-labs
  • RubyGems
    biundlier 1.0.0, 1.0.97109
    MAL-2026-16670 reversing-labs
  • RubyGems
    biundleu 1.0.0, 1.0.62138
    MAL-2026-16669 reversing-labs
  • RubyGems
    biundlet 1.0.0, 1.0.63758
    MAL-2026-16668 reversing-labs
  • RubyGems
    biundlesr 1.0.0, 1.0.72337
    MAL-2026-16667 reversing-labs
  • RubyGems
    biundlers 1.0.0, 1.0.17728
    MAL-2026-16666 reversing-labs
  • RubyGems
    biundlerr 1.0.0, 1.0.29319
    MAL-2026-16665 reversing-labs
  • RubyGems
    biundlero 1.0.0, 1.0.44201
    MAL-2026-16664 reversing-labs
  • RubyGems
    biundlern 1.0.0, 1.0.57928
    MAL-2026-16663 reversing-labs
  • RubyGems
    biundlerl 1.0.0, 1.0.92299
    MAL-2026-16662 reversing-labs
  • RubyGems
    biundleri 1.0.0, 1.0.46355
    MAL-2026-16661 reversing-labs
  • RubyGems
    biundlere 1.0.0, 1.0.88339
    MAL-2026-16660 reversing-labs
  • RubyGems
    biundlera 1.0.0, 1.0.54273
    MAL-2026-16659 reversing-labs
  • RubyGems
    biundler-ruby 1.0.91435
    MAL-2026-16658 reversing-labs
  • RubyGems
    biundler-rb 1.0.45042
    MAL-2026-16657 reversing-labs
  • RubyGems
    biundler-lib 1.0.71943
    MAL-2026-16656 reversing-labs
  • RubyGems
    biundler-gem 1.0.56165
    MAL-2026-16655 reversing-labs
  • RubyGems
    biundler 1.0.0, 1.0.21845
    MAL-2026-16654 reversing-labs
  • RubyGems
    biundleor 1.0.0, 1.0.75887
    MAL-2026-16653 reversing-labs
  • RubyGems
    biundleo 1.0.0, 1.0.46059
    MAL-2026-16652 reversing-labs
  • RubyGems
    biundlenr 1.0.0, 1.0.77285
    MAL-2026-16651 reversing-labs
  • RubyGems
    biundlelr 1.0.0, 1.0.91825
    MAL-2026-16650 reversing-labs
  • RubyGems
    biundleir 1.0.0, 1.0.2108
    MAL-2026-16649 reversing-labs
  • RubyGems
    biundlei 1.0.0, 1.0.36135
    MAL-2026-16648 reversing-labs