CYBERSECURITYTRACKER
Vulnerabilities

Malicious packages

Malicious and typosquat open-source packages reported through the Open Source Security Foundation (OpenSSF) Malicious Packages project.

A notable record has a named finder, a tracked story, or an origin beyond the boilerplate GitHub Advisory Database and OpenSSF Package Analysis feeds. Every other recent record stays counted and remains available in the comma-separated values (CSV) download.

1,246 reported in the last 30 days: npm 1,025, PyPI 220, and crates.io 1; 2 tied to stories.870 notable records listed376 boilerplate-origin records (counted, not listed)

Population: records whose newest valid publisher or modification date is 2026-10-08 through 2026-11-06, inclusive. Records without either date are retained as undated rather than treated as old.

Download all 1,246 rows as comma-separated values (CSV) for software composition analysis (SCA) tools

870 of 870 shown

Plus 376 malicious-package records this window have only boilerplate origins and no named finder or tracked story. They are counted but not listed here, and remain available in the CSV.

About this data

Records come from the Open Source Security Foundation (OpenSSF) Malicious Packages project, a community catalog of open-source supply-chain compromises in Open Source Vulnerabilities (OSV) format. They are a distinct entity from the Common Vulnerabilities and Exposures (CVE) table: a malicious package has no CVE identity, so this tracker keys them on the malicious-package identifier and never mixes them into the vulnerabilities table, so this is not a CVE list. A record is joined to a story only on an exact ecosystem and package-name match, never a loose text match. This page carries metadata and links only. It never reproduces a package's code or payload, and each summary is the record's own text.

Malicious-package data is the OpenSSF Malicious Packages, licensed Apache-2.0, maintained by Open Source Security Foundation (OpenSSF), distributed through Open Source Vulnerabilities (OSV.dev). Individual finder credit is shown on each expanded record, which needs JavaScript. The compact index carries only the identifier, name, and ecosystem, so a reader without JavaScript is not promised finder credit that this page cannot show.

Glossary

Open in glossary