Malicious package index — page 10 of 36

Every malicious-package advisory O3 Security publishes, listed so each one is reachable in a few clicks. 7,137 packages across 36 pages.

• npm/keyv
• npm/logfmt-core
• npm/luluking
• npm/merchantprefsservice-paypal
• npm/native-frontend-orb
• npm/permcserver
• npm/picasso-plugin-hammer
• npm/polymarket-stake-math
• npm/polymarket-stake-maths
• npm/polyprompt
• npm/pp-react-ui5
• npm/px8my
• npm/react-scroll-disable
• npm/scan-only
• npm/stellarfix
• npm/supertokens-web
• npm/svgcraft-core
• npm/tailwind-animate-plugin
• npm/tailwind-animation-founder
• npm/tailwind-motionkit
• npm/tailwindcss-anim
• npm/terminal-mascot
• npm/test-dev-link
• npm/trailserver
• npm/true
• npm/ts-escro
• npm/ts-escrow
• npm/uac-package
• npm/uniswap-sdk-v4
• npm/veldora
• npm/veskr
• npm/websight-p2p
• npm/workbench-browser-server
• npm/xo-member-components
• pypi/abseil-py
• pypi/aiprepkit
• pypi/crypto-wallet-sdk
• pypi/discord-telemetry
• pypi/eth-account-wallet
• pypi/launchdarkly-ai-server-sdk
• pypi/neroteam-v1
• pypi/numpyp
• pypi/paperclip-ai
• pypi/tinkoff-cloud-apis-internal
• npm/@ai-agent-node/createnode
• npm/@daylightqc/date-fmt-lite
• npm/@fazzcode/baileys
• npm/@keyv/dynamo
• npm/@zzzgenesis00/solana-wallet-adapter
• npm/@zzzgenesis00/xrp-lib
• npm/allurectl
• npm/chaos-mcp
• npm/claude-cup
• npm/date-format-utils-xz
• npm/discord-vibegrations-api-helpers
• npm/f0-fpti-tracking-manager
• npm/faust-cont
• npm/fs-extra-core
• npm/hazmat-cfr
• npm/iwomm-mcp
• npm/my-tailwind-gutenberg-block
• npm/org-twilio-phone-numbers-utils
• npm/pp-react-worldready
• npm/streak-daycount
• npm/streak-metrics-math
• npm/tailwind-gutenberg-block-zero
• npm/vitest-axios
• npm/zer0onetencent
• npm/zer0onetencent2
• pypi/data-parser-utils
• pypi/reimagined-broccoli
• npm/@0xlr/prisma-client-js
• npm/@0xlr/stripe-checkout-js
• npm/@0xlr/stripe-frontend
• npm/@0xlr/supabase-db
• npm/@0xlr/vercel-analytics
• npm/sso-users-detection
• npm/@sie-ppr-web-checkout/app
• npm/js-client-node
• npm/neon-poly-utls
• npm/prisma-callback
• npm/data-parser-utils
• npm/discord-ms
• npm/n8n-nodes-trust-me-im-totally-safe
• npm/streak-metrics-core
• npm/testsetset
• npm/zcas
• pypi/ml-nps-shared
• npm/node-procmetrics
• npm/@crbrc/xbt
• npm/@immobiliarelabs/backstage-plugin-gitlab
• npm/@nx/devkit
• npm/@wagni_bot/ethereum-wallet
• npm/@wagni_bot/orca-sdk
• npm/@wagni_bot/solana-sdk
• npm/aftermath-sui
• npm/aone-sandbox
• npm/api-node-sdk
• npm/app-node-layer
• npm/easyway2
• npm/filifecycleserv-paypal
• npm/n8n-nodes-devops-utils
• npm/react-tabulix-extended
• pypi/discordia-telemetria
• pypi/karpatkey
• pypi/karpatkit
• pypi/mrmustard
• npm/@kalipto/local
• npm/@my_name_is_khn/express-security-tool-v1
• npm/@thone33/core-utils
• npm/express-self-destruct
• npm/hardhat-compile-ethers
• npm/jextic-eclib
• npm/llama-tokenizer
• npm/npx-whoami-demo
• npm/permcarmserver
• npm/roblox-api-client
• npm/thurdweb
• npm/tinymask-js
• npm/v018-axios-cdntest
• npm/@across-toolkit/typescript-config
• npm/logger-daemon-regex
• pypi/defi-kit
• pypi/intel-cicd-repo-infrastructure
• npm/@bcryptln/bcryptjs
• npm/aio-commerce-lib-app
• npm/habinger
• npm/n8n-nodes-utils-helper
• pypi/num2words
• pypi/telebot-bot-run
• pypi/torch-musa
• npm/@alerts/components
• npm/@anna-money/anna-web-lib
• npm/@doctolib-apps/native-personalized-services
• npm/@fed-sofia/jetify
• npm/@flipbit2-bb/test-auth-state
• npm/@gocortexio/npmgremlinbox-cal-1-0-combined-work-exception
• npm/@gocortexio/npmgremlinbox-fdk-aac
• npm/@gocortexio/npmgremlinbox-hippocratic-2-1
• npm/@gocortexio/npmgremlinbox-typosquat-lodash
• npm/@hatcha-captcha/core
• npm/@markscan/reports
• npm/@meme-sdk/trade
• npm/@ms-ows/logging
• npm/@rakuten-rewards/messaging-sdk
• npm/@snowsight/debug-tooling
• npm/@solana-launchpad/sdk
• npm/@su-doughnym/metrics-js
• npm/@su-doughnym/react-dlb
• npm/@validate-ethereum-address/core
• npm/@validate-sdk/v2
• npm/@validator-sdk/pubkey
• npm/@vite-js/ui
• npm/@vtmn-play/react
• npm/ccl-component-resources
• npm/chai-use-chain
• npm/clx-cookie-signature
• npm/date-fns-lite
• npm/endpointmap
• npm/ethers-jss
• npm/fabric-graphics
• npm/hot-validation-sdk
• npm/jscrambler
• npm/kdrive-utils
• npm/luludawang-kit
• npm/markscan-api
• npm/modern-events
• npm/mvn-runtime
• npm/nabisco
• npm/procwire
• npm/pui-diagnostics
• npm/reading-cookies
• npm/rollup-plugin-polyfill-handler
• npm/routecraft
• npm/sitecore-mm-component-style
• npm/swplayer-react-sl
• npm/tailwind-core
• npm/terminal-pretty-logger
• npm/vite-enhancer-config
• npm/vite-react-toolkit
• npm/vscode-test-web
• npm/vybscan-testbed-inert-postinstall
• npm/web-model-bridge
• pypi/bt-signal-utils
• pypi/speed-testing-nt
• pypi/telebot-bot
• pypi/telebot-infe
• pypi/telebot-infoo
• pypi/telegrem
• npm/@injectivelabs/sdk-ts
• npm/anthropic-claude-latest
• npm/theta-sdk-js
• npm/@edgecommons/streamlog-node
• npm/@sciagent/cli
• npm/@vibelet/cli
• npm/bvm-core
• npm/codeam-cli
• npm/memtry-cli
• npm/time-format-kit
• npm/wordpad-text-ui