Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,372 npm 223,233 PyPI 11,995 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,372 reports · Feed

  • RubyGems
    biondler 1.0.0, 1.0.93172
    MAL-2026-16607 reversing-labs
  • RubyGems
    binundler 1.0.0, 1.0.94038
    MAL-2026-16606 reversing-labs
  • RubyGems
    binudler 1.0.0, 1.0.56204
    MAL-2026-16605 reversing-labs
  • RubyGems
    binlder 1.0.0, 1.0.94718
    MAL-2026-16604 reversing-labs
  • RubyGems
    bindlef 1.0.0, 1.0.72129
    MAL-2026-16603 reversing-labs
  • RubyGems
    bimdler 1.0.0, 1.0.88477
    MAL-2026-16602 reversing-labs
  • RubyGems
    bilundler 1.0.0, 1.0.46618
    MAL-2026-16601 reversing-labs
  • RubyGems
    bijndler 1.0.0, 1.0.75874
    MAL-2026-16600 reversing-labs
  • RubyGems
    biiundler 1.0.0, 1.0.69433
    MAL-2026-16599 reversing-labs
  • RubyGems
    biindler 1.0.0, 1.0.2586
    MAL-2026-16598 reversing-labs
  • RubyGems
    bihndler 1.0.0, 1.0.59404
    MAL-2026-16597 reversing-labs
  • RubyGems
    bieundler 1.0.0, 1.0.52837
    MAL-2026-16596 reversing-labs
  • RubyGems
    biendler 1.0.0, 1.0.98697
    MAL-2026-16595 reversing-labs
  • RubyGems
    biaundler 1.0.0, 1.0.16010
    MAL-2026-16594 reversing-labs
  • RubyGems
    biandler 1.0.0, 1.0.85484
    MAL-2026-16593 reversing-labs
  • RubyGems
    bhsndler 1.0.0, 1.0.77793
    MAL-2026-16592 reversing-labs
  • RubyGems
    bhnlder 1.0.0, 1.0.3125
    MAL-2026-16591 reversing-labs
  • RubyGems
    bhndler 1.0.0, 1.0.50255
    MAL-2026-16590 reversing-labs
  • RubyGems
    bhndlef 1.0.0, 1.0.45510
    MAL-2026-16589 reversing-labs
  • RubyGems
    bhmdler 1.0.0, 1.0.91234
    MAL-2026-16588 reversing-labs
  • RubyGems
    beusndler 1.0.0, 1.0.56281
    MAL-2026-16587 reversing-labs
  • RubyGems
    beunlder 1.0.0, 1.0.46613
    MAL-2026-16586 reversing-labs
  • RubyGems
    beundler 1.0.0, 1.0.36258
    MAL-2026-16585 reversing-labs
  • RubyGems
    beundlef 1.0.0, 1.0.97612
    MAL-2026-16584 reversing-labs
  • RubyGems
    beumdler 1.0.0, 1.0.33832
    MAL-2026-16583 reversing-labs
  • RubyGems
    besndler 1.0.0, 1.0.70965
    MAL-2026-16582 reversing-labs
  • RubyGems
    benlder 1.0.0, 1.0.1940
    MAL-2026-16581 reversing-labs
  • RubyGems
    bendler 1.0.0, 1.0.38745
    MAL-2026-16580 reversing-labs
  • RubyGems
    bendlef 1.0.0, 1.0.81185
    MAL-2026-16579 reversing-labs
  • RubyGems
    bemdler 1.0.0, 1.0.84342
    MAL-2026-16578 reversing-labs
  • RubyGems
    beiundler 1.0.0, 1.0.2495
    MAL-2026-16577 reversing-labs
  • RubyGems
    bbusndler 1.0.0, 1.0.78071
    MAL-2026-16576 reversing-labs
  • RubyGems
    bbunlder 1.0.0, 1.0.35752
    MAL-2026-16575 reversing-labs
  • RubyGems
    bbundler 1.0.0, 1.0.59959
    MAL-2026-16574 reversing-labs
  • RubyGems
    bbundlef 1.0.0, 1.0.50765
    MAL-2026-16573 reversing-labs
  • RubyGems
    bbumdler 1.0.0, 1.0.84252
    MAL-2026-16572 reversing-labs
  • RubyGems
    bbiundler 1.0.0, 1.0.93989
    MAL-2026-16571 reversing-labs
  • RubyGems
    bausndler 1.0.0, 1.0.7126
    MAL-2026-16570 reversing-labs
  • RubyGems
    baunlder 1.0.0, 1.0.78358
    MAL-2026-16569 reversing-labs
  • RubyGems
    baundler 1.0.0, 1.0.89456
    MAL-2026-16568 reversing-labs