Malicious package index — page 16 of 37

Every malicious-package advisory O3 Security publishes, listed so each one is reachable in a few clicks. 7,342 packages across 37 pages.

• pypi/bt-burn-watch
• pypi/coolbox
• pypi/executor-http
• pypi/jec
• pypi/pantheon-agents
• pypi/pylogxo
• pypi/silly-logger
• pypi/synago
• pypi/tao-subnet-metrics
• npm/@bestlzk/sectest
• npm/@coterie-baby/common
• npm/@qlab/ui
• npm/@solana-labs/web3-js
• npm/@w2d/web-components
• npm/@whatnot-web/www-legacy
• npm/check-error-util
• npm/cms-store-ren
• npm/defi-tools-39
• npm/goreleaser-run
• npm/hex-type
• npm/pc-optimizer
• npm/rate-limit-flexible
• npm/wallet-sdk-9
• npm/wp-env
• npm/zer0one-dnslog
• npm/zer0onedate
• pypi/bittensor-burn-watch
• pypi/icinga
• pypi/langchain-core-mcp
• npm/@access-risk/browser-remedy-react
• npm/@orion-design-system/store
• npm/csc154-internall-depend
• npm/devkitx
• npm/get-deps-path
• npm/martinez-polygon-clipping-simul-dalton
• npm/mds-webcomponents
• npm/plugin-fastify
• npm/prettier-sdk
• npm/react-tracked-tony
• npm/solc-abi
• npm/solc-compiler
• npm/tailwind-animator
• npm/@dktunited/anly-tracker-v2
• npm/@doaction/shared
• npm/@doaction/signalhub
• npm/@doaction/storage
• npm/@doaction/types
• npm/@doaction/wasm-loader
• npm/@klapp-login-platform/native-sdk
• npm/@klapp-login-platform/routes
• npm/@listings/energy-labels
• npm/@nstrlabs/api-client
• npm/@nstrlabs/auth
• npm/@oplus/obus-core
• npm/@oplus/obus-web-sdk
• npm/@oplus/obus-web-sdk-plugin-recovery
• npm/clsx-js
• npm/exodus-solana-sdk
• npm/grateful-checkout
• npm/grateful-payments
• npm/menu-filter-widget-web
• npm/screenpipe-mcp-http
• npm/t-invest-mcp-server
• npm/xorma-js
• pypi/dynamo-release
• pypi/spateo-release
• pypi/ufish
• npm/quickwinston
• pypi/clip-logger
• pypi/durabletask
• pypi/lightning
• pypi/xinference
• npm/auth-javascript
• npm/iceberg-javascript
• npm/microsoft-applicationinsights-common
• npm/supabase-javascript
• npm/ai3
• npm/aonote
• npm/arnext-arkb
• npm/atomic-notes
• npm/create-arnext-app
• npm/cwao
• npm/javascript-yaml
• npm/monade
• npm/testnpmnmp
• npm/wdb-core
• npm/wdb-sdk
• npm/weavedb-console
• npm/weavedb-exm-sdk-web
• npm/weavedb-lite
• npm/weavedb-sdk
• npm/weavedb-sdk-base
• npm/weavedb-tools
• npm/yaml-javascript
• npm/zkjson
• pypi/sf-silly-goose-requests
• npm/brave-search-mcp-server
• npm/webpack-json
• pypi/internal-tracker
• pypi/jules-test-utils
• pypi/tronlab
• npm/@opensearch-project/opensearch
• npm/@redhat-cloud-services/frontend-components
• npm/@redhat-cloud-services/hcc-feo-mcp
• npm/@redhat-cloud-services/topological-inventory-client
• pypi/quant-backtest-helpers
• npm/@chat-template/auth
• npm/@telenor-se/core
• npm/@tmecontinue/cli
• npm/audit-logsss
• npm/chainix
• npm/cms-github
• npm/cms-helpgit
• npm/cms-storehub
• npm/collected-forms-embed-js
• npm/motion-tool
• npm/picnic-react-mise-en-place
• npm/to-cms
• npm/xarc-webpack-cli
• pypi/redteam-qxz7-utils
• npm/@challenger6/vm-pattern-library
• pypi/crypto-helper
• pypi/cscc-glass-house
• pypi/hell-cipher
• npm/@capibar.chat/ui-kit
• npm/@sber-ecom-core/sberpay-widget
• npm/@t-in-one/add_application
• npm/@t-in-one/prefill_bundle_data_token
• npm/@t-in-one/prefill_transformers_data_token
• npm/@t-in-one/safe_local_storage_token
• pypi/discord-ban
• npm/@antv/dom-util
• npm/@antv/f-lottie
• npm/@antv/g-canvaskit
• npm/@antv/g-lite
• npm/@antv/g-math
• npm/@antv/g-plugin-3d
• npm/@antv/g-plugin-device-renderer
• npm/@antv/g-plugin-rough-svg-renderer
• npm/@antv/g6-extension-react
• npm/@antv/graphin
• npm/@antv/l7
• npm/@antv/l7-component
• npm/@antv/l7-layers
• npm/@antv/layout-gpu
• npm/@antv/li-sdk
• npm/@antv/my-f2
• npm/@antv/x6-plugin-selection
• npm/@antv/x6-plugin-stencil
• npm/@antv/x6-react-components
• npm/@antv/x6-vue-shape
• npm/@antv/xflow
• npm/@citi-icg-158830/icgds-react-css
• npm/@cloudplatform-single-spa/administration
• npm/@cloudplatform-single-spa/arenadata-db
• npm/@cloudplatform-single-spa/floating-ips
• npm/@cloudplatform-single-spa/logaas
• npm/@cloudplatform-single-spa/marketplace-gigachat
• npm/@cloudplatform-single-spa/security-groups
• npm/@cloudplatform-single-spa/svp-s3-storage
• npm/@cplace-paw-fe/cf-training-extended
• npm/@lint-md/core
• npm/@lint-md/parser
• npm/appkit-react-utils
• npm/axis-abc-search-address
• npm/axis-notification
• npm/chai-as-tuned
• npm/codex-devcontainer-install
• npm/dds-js-idl-types
• npm/deepl-sync
• npm/erslove
• npm/ethers-errors
• npm/ethers-hash
• npm/ethers-hdnode
• npm/ethers-signing-key
• npm/jest-date-mock
• npm/miz
• npm/nextjs-chat-with-ai-service
• npm/node-ipc
• npm/power-apps
• npm/power-platform-playwright-toolkit
• npm/react-svg-animator
• npm/reactive-cdk-app
• npm/tailwind-effect
• npm/tailwind-typography-cssstyle
• npm/viem-multichain
• npm/web3-config-loader
• npm/@car-loans/deal
• npm/@car-loans/deal-aff
• npm/@car-loans/online-scoring-aff
• npm/@car-loans/show-car-year-module
• npm/@cloudplatform-single-spa/anti-ddos
• npm/@cloudplatform-single-spa/bare-metal-servers
• npm/@cloudplatform-single-spa/billing
• npm/@cloudplatform-single-spa/dataplatform-nessie
• npm/@cloudplatform-single-spa/document-db
• npm/@cloudplatform-single-spa/marketplace-main
• npm/@cloudplatform-single-spa/ml-ai-agents-trigger
• npm/@cloudplatform-single-spa/mlspace-access-request
• npm/@cloudplatform-single-spa/pangolin