Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,372 npm 223,233 PyPI 11,995 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,372 reports · Feed

  • RubyGems
    biundlef 1.0.0, 1.0.17290
    MAL-2026-16647 reversing-labs
  • RubyGems
    biundleer 1.0.0, 1.0.64011
    MAL-2026-16646 reversing-labs
  • RubyGems
    biundlee 1.0.0, 1.0.60208
    MAL-2026-16645 reversing-labs
  • RubyGems
    biundled 1.0.0, 1.0.7264
    MAL-2026-16644 reversing-labs
  • RubyGems
    biundlear 1.0.0, 1.0.2868
    MAL-2026-16643 reversing-labs
  • RubyGems
    biundlea 1.0.0, 1.0.71460
    MAL-2026-16642 reversing-labs
  • RubyGems
    biundle 1.0.0, 1.0.53749
    MAL-2026-16641 reversing-labs
  • RubyGems
    biundldr 1.0.0, 1.0.49576
    MAL-2026-16640 reversing-labs
  • RubyGems
    biundlar 1.0.0, 1.0.58481
    MAL-2026-16639 reversing-labs
  • RubyGems
    biundlaer 1.0.0, 1.0.33016
    MAL-2026-16638 reversing-labs
  • RubyGems
    biundker 1.0.0, 1.0.45257
    MAL-2026-16637 reversing-labs
  • RubyGems
    biundiler 1.0.0, 1.0.1083
    MAL-2026-16636 reversing-labs
  • RubyGems
    biundier 1.0.0, 1.0.34439
    MAL-2026-16635 reversing-labs
  • RubyGems
    biunder 1.0.0, 1.0.11463
    MAL-2026-16634 reversing-labs
  • RubyGems
    biundelr 1.0.0, 1.0.26209
    MAL-2026-16633 reversing-labs
  • RubyGems
    biundeler 1.0.0, 1.0.85614
    MAL-2026-16632 reversing-labs
  • RubyGems
    biundeer 1.0.0, 1.0.11827
    MAL-2026-16631 reversing-labs
  • RubyGems
    biunddler 1.0.0, 1.0.840
    MAL-2026-16630 reversing-labs
  • RubyGems
    biundaler 1.0.0, 1.0.97181
    MAL-2026-16629 reversing-labs
  • RubyGems
    biundaer 1.0.0, 1.0.9461
    MAL-2026-16628 reversing-labs
  • RubyGems
    biuncler 1.0.0, 1.0.92211
    MAL-2026-16627 reversing-labs
  • RubyGems
    biunaler 1.0.0, 1.0.36159
    MAL-2026-16626 reversing-labs
  • RubyGems
    biunadler 1.0.0, 1.0.77294
    MAL-2026-16625 reversing-labs
  • RubyGems
    biumdler 1.0.0, 1.0.23058
    MAL-2026-16624 reversing-labs
  • RubyGems
    biulndler 1.0.0, 1.0.44697
    MAL-2026-16623 reversing-labs
  • RubyGems
    biujdler 1.0.0, 1.0.37645
    MAL-2026-16622 reversing-labs
  • RubyGems
    biuindler 1.0.0, 1.0.36356
    MAL-2026-16621 reversing-labs
  • RubyGems
    biuidler 1.0.0, 1.0.52773
    MAL-2026-16620 reversing-labs
  • RubyGems
    biuhdler 1.0.0, 1.0.99775
    MAL-2026-16619 reversing-labs
  • RubyGems
    biuendler 1.0.0, 1.0.22786
    MAL-2026-16618 reversing-labs
  • RubyGems
    biuedler 1.0.0, 1.0.57239
    MAL-2026-16617 reversing-labs
  • RubyGems
    biudnler 1.0.0, 1.0.52551
    MAL-2026-16616 reversing-labs
  • RubyGems
    biudler 1.0.0, 1.0.7805
    MAL-2026-16615 reversing-labs
  • RubyGems
    biubdler 1.0.0, 1.0.82145
    MAL-2026-16614 reversing-labs
  • RubyGems
    biuandler 1.0.0, 1.0.9963
    MAL-2026-16613 reversing-labs
  • RubyGems
    biuadler 1.0.0, 1.0.67462
    MAL-2026-16612 reversing-labs
  • RubyGems
    bisundler 1.0.0, 1.0.38152
    MAL-2026-16611 reversing-labs
  • RubyGems
    bisndler 1.0.0, 1.0.79228
    MAL-2026-16610 reversing-labs
  • RubyGems
    birundler 1.0.0, 1.0.80997
    MAL-2026-16609 reversing-labs
  • RubyGems
    bioundler 1.0.0, 1.0.94815
    MAL-2026-16608 reversing-labs