Skip to content
OpenAdvisories

Supply chain

Malicious packages

Packages published with intentionally malicious code — typosquats, dependency confusion, credential stealers. If any of these is installed, treat the machine as compromised and rotate its secrets.

Source: OpenSSF Malicious Packages via OSV.dev

All 240,377 npm 223,238 PyPI 11,995 RubyGems 4,316 NuGet 782 crates.io 23 Go 20 Maven 2 Packagist 1

240,377 reports · Feed

  • npm
    starbucks-sdk 1.0.0
    MAL-2026-16345 amazon-inspector, ossf-package-analysis
  • npm
    radio-player-theme 6.0.0, 2.0.0, 3.0.0, 5.0.0, 4.0.0, 0.0.0-stage, 1.0.0
    MAL-2026-16347 amazon-inspector, ghsa-malware 1 IOC
  • PyPI
    urc 99.99.99
    MAL-2026-16298 kam193
  • npm
    keroeltop 99.99.99
    MAL-2026-16297 ossf-package-analysis, amazon-inspector
  • PyPI
    py-venv-doctor 0.1.0, 0.1.1
    MAL-2026-16296 kam193, amazon-inspector 1 IOC
  • npm
    @shared-web/utils 9.9.10
    MAL-2026-16292 amazon-inspector
  • npm
    chai-as-indexed 7.2.8, 6.0.5
    MAL-2026-16293 amazon-inspector
  • npm
    @insiderintelligence/googleadmanager 9.9.10, 9.9.9
    MAL-2026-16290 amazon-inspector, ghsa-malware
  • npm
    tailwindcss-forms-ui 0.5.2
    MAL-2026-16295 amazon-inspector
  • npm
    @shared-runtime/modules 9.9.10
    MAL-2026-16291 amazon-inspector
  • npm
    internallib_v949 1.0.3
    MAL-2026-16294 amazon-inspector, ghsa-malware
  • npm
    openmct-heatmap all versions
    MAL-2026-16287 ghsa-malware
  • npm
    test890-auth 1.0.0
    MAL-2026-16289 ghsa-malware, amazon-inspector
  • npm
    test89-auth 1.0.1
    MAL-2026-16288 ghsa-malware, amazon-inspector
  • npm
    test8999-auth 1.0.1
    MAL-2026-16286 ossf-package-analysis, ghsa-malware, amazon-inspector
  • npm
    test899-auth 1.0.1
    MAL-2026-16285 ossf-package-analysis, ghsa-malware, amazon-inspector
  • npm
    @shared-web/assets 9.9.10
    MAL-2026-16283 amazon-inspector
  • npm
    sinful 1.0.0
    MAL-2026-16284 ghsa-malware, amazon-inspector
  • npm
    tailwindcss-form 0.5.1
    MAL-2026-16282 amazon-inspector, ghsa-malware
  • npm
    @sanzoffc/baileys 3.0.4
    MAL-2026-16281 amazon-inspector, ghsa-malware
  • npm
    xzvbailsx 1.0.0
    MAL-2026-16279 amazon-inspector
  • npm
    xzvbailey 1.0.0
    MAL-2026-16278 amazon-inspector
  • npm
    xa424234657567 1.0.0
    MAL-2026-16277 amazon-inspector
  • npm
    zero-baileys 2.7.0, 3.2.0, 3.3.0, 3.3.5, 3.5.0, 2.5.5, 2.6.0, 3.6.0, 3.4.6
    MAL-2026-16280 amazon-inspector, ghsa-malware
  • npm
    @lekzo/baileys 0.0.1, 0.0.7
    MAL-2026-16276 amazon-inspector, ghsa-malware
  • PyPI
    requests-auroras 2.34.2
    MAL-2026-16274 kam193 1 IOC
  • npm
    blue-string-formatter-utils 1.0.0
    MAL-2026-16273 amazon-inspector
  • npm
    @tink/tink-link-core 9.9.10
    MAL-2026-16270 amazon-inspector
  • npm
    test89078-auth 99.99.99
    MAL-2026-16271 amazon-inspector
  • PyPI
    requests-triwes 2.34.2
    MAL-2026-16275 kam193 1 IOC
  • PyPI
    requests-asetwe 2.34.2
    MAL-2026-16269 kam193, amazon-inspector
  • PyPI
    index-forum 2.5.4
    MAL-2026-16268 kam193, amazon-inspector
  • npm
    kartykgithub-multiversion-a 1.0.1, 1.0.0
    MAL-2026-16272 ghsa-malware
  • PyPI
    pyjstat-smooth 1.5.0, 2.5.0, 2.5.1, 2.5.2, 2.5.3, 2.5.5, 2.5.6, 2.5.7, 2.5.8, 2.5.9, 2.5.10, 2…
    MAL-2026-16267 kam193, amazon-inspector
  • npm
    @kartyk-github-org/takedown-b all versions
    MAL-2026-16266 ghsa-malware
  • npm
    @kartyk-github-org/takedown-a all versions
    MAL-2026-16265 ghsa-malware
  • npm
    tailwindcss-form-ui 0.5.1, 0.5.8
    MAL-2026-16262 amazon-inspector
  • npm
    tailwindcss-form-utils 0.5.1, 0.5.9
    MAL-2026-16263 amazon-inspector, ghsa-malware
  • npm
    @railone/image-utils 1.1.10
    MAL-2026-16261 amazon-inspector
  • PyPI
    aiosendletter 0.2.0, 3.7, 3.8, 3.9, 4.0, 4.1, 4.3, 4.5, 4.6
    MAL-2026-16264 kam193, amazon-inspector 1 IOC