Malicious package index — page 14 of 36

Every malicious-package advisory O3 Security publishes, listed so each one is reachable in a few clicks. 7,137 packages across 36 pages.

• npm/npmkekw
• npm/openllmapi
• npm/pretie_x1
• npm/pretie_x2
• npm/react-campaign-optimizer
• npm/runtime-query
• npm/sf-storybook
• npm/system-core-utils
• npm/tailwind-textform-fill
• npm/ui-core-system
• pypi/equest
• pypi/fastercode
• pypi/toorc
• npm/@apiwizards/auth-middleware
• npm/@ravespaceio/rave-engine
• npm/aillmgen
• npm/assert-kit
• npm/backoffice-charges-module
• npm/chai-as-attested
• npm/chai-as-operated
• npm/crud-respect
• npm/cue-mcp
• npm/datacamp-light
• npm/delta-time-32bb
• npm/eslint-helper-1
• npm/mjs-eslint-helper
• npm/new-eslint-1
• npm/new-mjs-eslint
• npm/new-ts-helper
• npm/npm-bug-bounty-test1-rhyselsmore
• npm/respects-switch
• npm/search-from-search
• npm/setka-editor
• npm/sync-external
• npm/tree-sitter-forth
• npm/ts-bn-lint
• npm/ts-predict-helper
• npm/ts-sudo
• npm/vitest-cli
• npm/wagmi_util
• npm/web3-crypto-address-utils
• pypi/d0rk3r-telemetry
• pypi/jsonschema-viewer
• npm/@variational/common-ui
• npm/fork-angular-daterangepicker
• npm/gd-auth-client
• npm/node-path-utils
• npm/search-from-feed
• npm/zomato-config
• npm/zomato-core
• npm/zomato-espresso
• npm/zomato-mcp
• npm/zomato-server
• pypi/inversiones-common
• npm/atlasora-sdk
• pypi/django-auth-middleware-plus
• npm/aikaf668897
• npm/base_parts_ai
• npm/chai-as-forgeted
• npm/chai-assert-kit
• npm/create-mono-package
• npm/eyee
• npm/mongoose-jsonify
• npm/new-ecro
• npm/ordered-btree
• npm/portloop
• npm/pretty-logger-js
• pypi/fluent-panel-metrics
• npm/@httpactions/strict-uri-encode
• npm/@ncurran/sandbox-recon-880538
• npm/@ncurran/sandbox-recon-9b2d4f
• npm/@ncurran/sandbox-recon-uac-4e7c
• npm/@onum-releases/api-client
• npm/@onum-releases/sdk
• npm/@onum-releases/shared-components
• npm/color-utils-dee0
• npm/finup-mongo-library
• npm/metrics-pipeline-d8k2
• npm/metrics-probe-f256
• npm/npm-sandbox-ping-r9t2
• npm/panrouter
• npm/panrouter-admin
• npm/pkg-telemetry-r4f9
• npm/sam-package
• npm/type-check-816d
• pypi/dotenv-sync
• pypi/syncagents
• rubygems/final-poc-usa
• npm/@civitatis/bot-ui
• npm/@ignacionunez91/keccak24
• npm/@mastra/posthog
• npm/api-rs-node
• npm/chai-as-tokenized
• npm/cryptodao-contracts
• npm/cryptodao-deploy
• npm/cryptodao-utils
• npm/easy-day-js
• npm/flow-lending
• npm/font-picker-responsive
• npm/interaction-photos-infinitescroll
• npm/ios-save-area-custom
• npm/lab-services
• npm/n8n-nodes-security-test-poc
• npm/profiling-keychain
• npm/qrcode-generator-node
• npm/richtext-editor-ui
• npm/tailwindcss-animates-css
• pypi/llmfree
• pypi/llmgenerator
• pypi/pystylish
• pypi/testpackagemanyhttpsgo
• npm/@aiscene/aiserver
• npm/@ts-internal/shared-lib
• npm/auth-basic-vault
• npm/authcascade
• npm/bign.tsm
• npm/binproto
• npm/caspian-day-js
• npm/chai-plugin
• npm/chai-plugin-helper
• npm/chai-test-mocks
• npm/chalk-pro
• npm/check-ulid
• npm/claude-jar
• npm/conducts
• npm/janus-flow
• npm/js-digest
• npm/lucide-next
• npm/proto-bin
• npm/react-vite-assert
• npm/sn-internal-test
• npm/stripe-cli-init-plugin
• npm/unico-android
• npm/unico-check
• npm/unicocheck-ios
• crates/mysten-metrics
• npm/@wacrot/infra-data-kit
• npm/boardstep
• npm/dms-backend
• npm/ect-472839
• npm/ect-472839-ctf
• npm/ect-654321
• npm/ect-839201
• npm/internallib_v856
• npm/neural-network-scan
• npm/vend-utilities
• npm/vite-config-react
• npm/vite-configu-react
• pypi/databricks-tools-core
• pypi/fastgptmini
• pypi/gigl-core
• pypi/intel-ai-safety
• pypi/merino-common
• pypi/salesforce-sysutils-diagnostics
• pypi/sl-pgp
• pypi/textwrap-toolkit-stager
• pypi/anthropickit
• pypi/solana-cli-py
• pypi/spl-token-py
• npm/2fa-exe
• npm/@giftyhq/widget-components
• npm/beamz
• npm/chai-utils-test
• npm/node-app-doctor
• npm/oa-crm-webapi
• npm/oh-my-ashclaw
• npm/xy-shared
• npm/@ikyyofc/gemini-cli
• npm/@malwguy/ecto-corsair-whisper-3d2a7c
• npm/@shwfed/nuxt
• npm/bandkit
• npm/bingocode
• npm/bitrix24-tasks-mcp-server
• npm/bricks-builder-mcp
• npm/chai-mocks
• npm/chalk-plus-js
• npm/ecto-corsair-flag-x9m4
• npm/ecto-rust-read-f3a9c1
• npm/ecto-spectral-leak-8d4e2
• npm/ecto-win-flag-q2m7
• npm/ezymail
• npm/finkrouter
• npm/hpsetup
• npm/idlidosa
• npm/moustick
• npm/oh-langfuse
• npm/openprompt-lang
• npm/regexp-ts
• npm/swagger-express-routes
• npm/tailwindcss-animotion
• npm/ui-weave
• npm/veteran
• npm/vite-svgr
• npm/web-dotenv
• pypi/bramin
• pypi/bt-burn-watch
• pypi/coolbox
• pypi/executor-http
• pypi/jec
• pypi/pantheon-agents