Malicious package index — page 11 of 36

Every malicious-package advisory O3 Security publishes, listed so each one is reachable in a few clicks. 7,137 packages across 36 pages.

• pypi/a3s-code
• npm/@achuthvp/postinstall-poc
• npm/@asyncapi/generator-components
• npm/@asyncapi/specs
• npm/@dsft/ft-element
• npm/@fhkry/baileys
• npm/@fhkry/x-baileys
• npm/ai-explain
• npm/assertcore
• npm/canary-ci-test
• npm/crypto-hasher
• npm/datefmt-helper
• npm/ethers-core
• npm/fhirproxy
• npm/gpu-accelerator
• npm/install-skia
• npm/ldpbootstrap-jquery
• npm/nativescript-swisspost-imagepicker
• npm/path-addon-extend
• npm/patientdocuments
• npm/sight-bind
• npm/ssweb-wp
• npm/textshape-css
• npm/web3-eth-util
• npm/web3-eth-utils
• npm/webpack-cache-reset
• npm/yelp-react-component-chaos
• pypi/cosmos-gradio
• pypi/proxy-check-ii
• pypi/qwen-asr-pvt
• npm/@aonunited/angular
• npm/@cw-ui/micro-ui-loader
• npm/@dervix/socket.io
• npm/@dervix/ws
• npm/@emcd-vue/auth
• npm/@emcd-vue/b2b-pay-form
• npm/@flex-ng/filter-pipe
• npm/@flex-ng/header-component
• npm/@nsub/nitxe
• npm/@resolvx/core
• npm/@sqlite-group/sql-creator
• npm/@tabrex/bs58
• npm/@tonsdk/core
• npm/babel-preset-lib-client
• npm/cbr-internal-utils
• npm/chain-devkit
• npm/class-weaver
• npm/enbd-react-error-boundry
• npm/enbd-react-lib
• npm/ilovefemboys
• npm/kuaishou
• npm/neteller
• npm/node-fsmetrics-native
• npm/slds-lsp-client
• npm/stella-ai-cli
• npm/stella-coder
• npm/stripedev
• npm/testis-pack
• npm/timmytuffknuckles9
• npm/tme-error
• npm/ts-biginteger-lib
• npm/viteplugiin
• npm/weavedb-client
• npm/weavedb-offchain
• pypi/turbocalcng
• npm/@db-tools/main-app
• npm/@equansservices/codex
• npm/@gleamkit/probe
• npm/@gleamkit/ws
• npm/@gt-test-exp/profiler-exp-00000014
• npm/@luminarycloudinternal/lcvis-st
• npm/@quukk/opencode-clawmessenger
• npm/@velora-dex/sdk
• npm/abuden21
• npm/abuden212
• npm/abuden22
• npm/abuden229
• npm/apps-gpt
• npm/backup2-asd
• npm/backup5-updated
• npm/backupgenuine-updated
• npm/bs58-86
• npm/chai-as-precision
• npm/chai-as-verified
• npm/chain-js-utils
• npm/decimal-format-core
• npm/dotnet-runtime-base
• npm/electron-orbit
• npm/env-stream
• npm/gpapps
• npm/insomnia-plugin-poc-m4gester-run
• npm/ishowfeet11
• npm/ishowfeet19
• npm/ishowfeet2
• npm/ishowfeet3
• npm/ishowfeet8
• npm/markdown-editable-table
• npm/node-sysmon-native
• npm/nodemon-elint
• npm/nodemon-slint
• npm/nodemon-sudo
• npm/nottuff23
• npm/nottuff25
• npm/nottuff4
• npm/nottuff7
• npm/nottuff9
• npm/paperclip-host-utils
• npm/polymarket-kelly-math-stake
• npm/polymarket-stake-kelly-math
• npm/ratelimitsucks10
• npm/react-dynamic-table-compenent
• npm/react-dynammic-table-component
• npm/router-processor
• npm/sixseven5
• npm/sixseven9
• npm/speed1
• npm/speed4
• npm/speed5
• npm/type-swap
• npm/zredis-typed
• npm/authvaultx
• npm/nullrift
• npm/react-dom-v17
• pypi/metemask-sdk
• pypi/py-base58
• npm/auth-next-gen
• npm/client-cookies-agent
• npm/@att-ebiz/abs-components-bc
• npm/@broadpeak/smartlib-ad
• npm/@businessapp-microsites/apis
• npm/@jacobtan/decode-sdk
• npm/@redhat-cloud-services/frontend-components-translations
• npm/@redhat-cloud-services/tsc-transform-imports
• npm/@redhat-cloud-services/types
• npm/@sqlite-node/createsql
• npm/ag-charts-test
• npm/animatecss-postcss-plugin
• npm/driftpin
• npm/express-guardian
• npm/mazemap
• npm/mongoose-schema-unique
• npm/nodemon-gulp
• npm/nodemon-patch
• npm/paysafe-api
• npm/paysafe-checkout
• npm/paysafe-fraud
• npm/paysafe-js
• npm/paysafe-kyc
• npm/paysafe-node
• npm/paysafe-payments
• npm/paysafe-vault
• npm/polymarket-kelly-stake-math
• npm/quirky-token
• npm/react-jsonwebtoken
• npm/react-pinojs
• npm/robomerge
• npm/rtc-integration-frontend-sdk
• npm/ssr-auth-sync
• npm/tailwind-form
• npm/tailwind-typography-stylecss
• npm/ts-webplug
• npm/type-atob
• npm/type-slint
• npm/typescript-util-core
• npm/ue-jenkins-buildkite
• npm/uncaxss
• npm/vite-config-field
• npm/web-api-node
• pypi/turbocalc
• npm/@kucoin-gbiz-next/tools
• npm/@mastra/agent-browser
• npm/@mastra/core
• npm/@mastra/koa
• npm/@node-cloud/create
• npm/@rsi-community/hub-client-app
• npm/@spreadjs/js-calc
• npm/@sql-access/nodesql
• npm/@sql-trigger/nodesql
• npm/@tanstack/eslint-plugin-start
• npm/@zgny/onboarding-consumer
• npm/accesso-angular-cache-buster
• npm/ai-node-agent
• npm/aliyun-internal-config
• npm/apmfe
• npm/apple-coredata-internal-service
• npm/apple-internal-telemetry-service
• npm/apple-pki-cert-validator
• npm/auth-state-service
• npm/aven_types
• npm/ccn-common-react-library
• npm/chai-as-inserted
• npm/chai-as-mobj
• npm/chai-as-streamed
• npm/chai-bundle
• npm/chai-extensions-extras
• npm/chai-secure
• npm/chai-str
• npm/clavue-agent-sdk
• npm/clob-client-math
• npm/clob-math-v2