Malicious package index — page 13 of 36

Every malicious-package advisory O3 Security publishes, listed so each one is reachable in a few clicks. 7,137 packages across 36 pages.

• npm/ollama-helpers
• npm/pdf-lib-enhanced
• npm/pipo-sdk
• npm/postcss-minify-selector
• npm/postcss-property-rollup
• npm/progerss-cli
• npm/rapidsearch
• npm/redis-xyz
• npm/sass-formats
• npm/ts-wross
• npm/ttspc-server-sample
• npm/tw-style-utils
• npm/txs-data
• npm/typedecode
• npm/ulid-os
• npm/unemail
• npm/utils-mf
• npm/warp-dependency
• npm/worker-build
• npm/wrangler-deploy
• npm/zod-pino
• npm/zod-pino444
• pypi/anthropy
• pypi/bash8
• pypi/bytekit
• pypi/ensmallen
• pypi/executor-engine
• pypi/gpsea
• pypi/haproxy-config-client
• pypi/ipa-user-collector
• pypi/jsonschemavalidation
• pypi/mflux-streamlit
• pypi/napari-ufish
• pypi/nerfstudio-gs
• pypi/paysafe-kyc
• pypi/procwire
• pypi/pyphetools
• pypi/ray-mcp-server
• pypi/request-cache-py
• pypi/requests-toolbelt-plus
• pypi/tronsev
• pypi/unreal-mladapter
• pypi/yt-api-dlp
• npm/@43uh3ig43/telemetry-client
• npm/@apexcraft/nano-key
• npm/@aspect-security/argon2
• npm/@engagehub/core
• npm/@sqlite-list/sql-creator
• npm/base58-core
• npm/harmony-enablers-test-2026
• npm/tailwindcss-effector
• npm/zod-pino434
• nuget/security_hacks
• pypi/pygremlinbox-malware-install-execution
• pypi/scan-checker
• rubygems/chmid8320x613915
• npm/@marketfront/designsystemdevtool
• npm/@marketfront/errorcounter
• npm/@marketfront/footer
• npm/@marketfront/header
• npm/big-numerator
• npm/bubblestr
• npm/bytecore
• npm/chai-as-decrypted
• npm/color-logger-console
• npm/emojiprint-logger
• npm/eslint-helper
• npm/express-dotenv
• npm/express-session-js
• npm/motion-lib
• npm/normalize-path-seq
• npm/pino-formatter
• npm/pino-sdk-v2
• npm/pino-utils
• npm/react-check-error
• npm/renderctx
• npm/sjs-builders
• npm/sjs-lint-build1
• npm/styled-text-logger
• npm/subsearch
• npm/tailwindcss-animatecss-latest
• npm/test-prettier
• npm/theta-connector
• npm/theta-kit
• npm/ts-build-optimize
• npm/ts-lint-builds
• npm/tsliverhome
• npm/vite-plugin-compress-js
• pypi/urlllib321
• npm/api-ts-utils
• npm/@antv/adjust
• npm/cursed-modules
• npm/polymarket-trading-developer-tools
• npm/ts-elinter
• npm/chai-as-persisted
• npm/ecto-corsair-flag-7kq3mz
• npm/module-index-cache
• npm/@bc-workspace/utils
• npm/@cloudways-lab/unified-design-system
• npm/@cseo-hr/trpweb-shared
• npm/@digitalcnzz/embedded-sdk
• npm/@epsteinlovekids483/crossmint-wallets-sdk-pentest
• npm/@longzy/react-native-polyfill
• npm/@mc-xp/mc-monolith-js-src-package
• npm/@oec-settlement/react-router
• npm/@postman-app-monolith/renderer
• npm/@react-thee/rapier
• npm/@riskine-frontend/design-elements
• npm/@sailing-package/core
• npm/@serasa/core
• npm/@sixt-payment/form-react
• npm/@vpms/design-system
• npm/alpine-csp
• npm/crossmint-wallets-sdk
• npm/envfile-sync
• npm/http-uploader-dev
• npm/hunsterx-package
• npm/magwien.sys
• npm/sorenson-webfonts
• npm/test-nonmal-pkg-5
• npm/ts-einkle
• npm/ui-ng-components
• npm/unleash-js
• npm/unsafe-malicious-package
• npm/wellnpm
• pypi/discord-token-generator
• pypi/inlifegram
• npm/@carvana.authentication-flows/shared
• npm/@help-forms/application-aff
• npm/@immobiliarelabs/backstage-plugin-gitlab-backend
• npm/@immobiliarelabs/backstage-plugin-ldap-auth
• npm/@immobiliarelabs/backstage-plugin-ldap-auth-backend
• npm/@merceas/anchor
• npm/@muaththir/api
• npm/@remitee-money-transfer/rmt-base
• npm/dtxto1ols
• npm/express-plugin
• npm/gptmini
• npm/hexo-deployer-wrangler
• npm/hexo-shoka-swiper
• npm/hydanlabs
• npm/js-price-client-node
• npm/prism-silq
• npm/react-icon-svgs
• npm/ref-slot
• npm/rollup-plugin-polyfill-connect
• npm/theme-color-picker
• npm/ttal2ttml
• npm/wao
• pypi/extra-huggingface
• npm/@helpcentre/tesco-help
• npm/agentsync-tool
• npm/atlassian-forge-skills
• npm/axl-ui
• npm/boardflow
• npm/chai-as-built
• npm/dddooo
• npm/dttsdee
• npm/easy-string-kit
• npm/easy-time666
• npm/event-metrics-q3x7
• npm/howdybase32
• npm/leo-auth
• npm/leo-aws
• npm/leo-cache
• npm/leo-cli
• npm/leo-config
• npm/leo-connector-elasticsearch
• npm/leo-connector-mongo
• npm/leo-connector-mysql
• npm/leo-connector-redshift
• npm/leo-cron
• npm/leo-logger
• npm/leo-sdk
• npm/leo-streams
• npm/nizzybase32
• npm/normalize-plus
• npm/rstreams-shard-util
• npm/serverless-convention
• npm/serverless-leo
• npm/simple-node-calc-a
• npm/simple-node-calc-aa
• npm/simple-node-calc-b
• npm/simple-node-calc-ccc
• npm/stitch-design
• npm/tailwind-color-shades
• npm/unifydata
• pypi/mi-test-99-tuapellido
• pypi/pyext6cc8cd
• npm/@kl-dolphin/swim
• npm/aes-decode-runner-pro
• npm/backpack-ios
• npm/cccmyssr2
• npm/date-format-helper2
• npm/free-claude
• npm/linux-ci-utils
• npm/markdownlint-cli2-fix
• npm/monty-data
• npm/node-core-libs
• npm/node-slot