Malicious package index — page 17 of 36

Every malicious-package advisory O3 Security publishes, listed so each one is reachable in a few clicks. 7,137 packages across 36 pages.

• npm/@antv/hierarchy
• npm/@antv/insight-component
• npm/@antv/l7-editor
• npm/@antv/l7-react
• npm/@antv/mcp-server-antv
• npm/@antv/mcp-server-chart
• npm/@antv/my-f2-pc
• npm/@antv/semantic-release-pnpm
• npm/@antv/x6
• npm/@antv/x6-angular-shape
• npm/@antv/x6-geometry
• npm/@antv/x6-plugin-keyboard
• npm/@antv/x6-react-shape
• npm/@antv/x6-vector
• npm/@antv/x6-vue3-shape
• npm/@antv/xflow-diff
• npm/@cap-js/openapi
• npm/@citi-icg-158830/elemental-chameleon
• npm/@datatrain/passenger-v3
• npm/@openclaw-cn/cli
• npm/@openclaw-cn/toutiao-ops
• npm/@tc-core/campus-service
• npm/ai-figure
• npm/alicloud-pop-core
• npm/amapcn
• npm/atlassian-jenkins-helper-utils
• npm/babel-plugin-version
• npm/boring-avatars-vanilla
• npm/bui-react-10components
• npm/citrea-sdk
• npm/citrea-utils
• npm/echarts-for-react
• npm/jest-canvas-mock
• npm/jest-electron
• npm/lint-md
• npm/marathon-assets
• npm/mcp-echarts
• npm/mcp-mermaid
• npm/openclaw-cn
• npm/parse-escape-regex-string
• npm/react-adsense
• npm/secure-env-loader
• npm/validate-api-key
• npm/vfat-tools
• npm/zentra-finance
• pypi/aurafarmer
• pypi/soundsource
• pypi/foundry-utils
• pypi/solana-web3-alt
• pypi/netping
• npm/apple-cktool-api-v2
• npm/apple-infra-gcp-leak
• npm/apple-internal-dev-check
• npm/chalk-pack
• npm/ethers-io
• npm/exxpress-utils
• npm/glob-helper
• npm/hello-world-pkg-value-value-p
• npm/joi-pack
• npm/nock-helper
• npm/rimraf-utils
• npm/solc-helper
• npm/truffle-js
• npm/web3-core-js
• pypi/jatinangor-teleport-testing-zer0id
• npm/chai-as-regulated
• npm/foundry-utils
• npm/sysbin
• npm/typography-stylecss
• npm/viem-core
• npm/viem-helpers
• npm/viem-utils-core
• pypi/natazx
• pypi/tronpath
• go/github.com/BufferZoneCorp/grpc-client
• go/github.com/BufferZoneCorp/log-core
• npm/11j
• npm/66o
• npm/88q
• npm/8oo
• npm/@2oolkit/hyperliquid-cli
• npm/@catamania/ui-components
• npm/@clearpool/utils
• npm/@dropout-ai/runtime
• npm/@gusmano/reext
• npm/chia-network
• npm/web3-common
• pypi/aiohttp-util
• pypi/alembic-util
• pypi/amino.fix
• pypi/api-request-helpers
• pypi/crypto-hash-utils
• pypi/dcchbot
• pypi/dlty
• pypi/graddio
• pypi/guan
• pypi/hackling
• pypi/numpy-lib
• pypi/pandas-data
• pypi/py-requests
• rubygems/knot-activesupport-logger
• rubygems/knot-date-utils-rb
• rubygems/knot-rack-session-store
• npm/01-0redi7qgbz0uv
• npm/0ctf-chalweb
• npm/1mi
• npm/3pool-sushibar
• npm/8q
• npm/@atlan/connectors
• npm/@bcs-bank/common-constants
• npm/@chahuadev/junk-sweeper-app
• npm/@channel_bot/xa0
• npm/@dirigible-ai/sdk
• npm/@draftauth/client
• npm/@draftauth/core
• npm/@draftlab/auth
• npm/@draftlab/auth-router
• npm/@enterprise-core/auth-gateway-bridge
• npm/@mesadev/rest
• npm/@mesadev/saguaro
• npm/@mesadev/sdk
• npm/@mistralai/mistralai
• npm/@mistralai/mistralai-gcp
• npm/@miurba/alcazaba
• npm/@ml-toolkit-ts/xgboost
• npm/@omni-corp-infra/sso-bridge-core
• npm/@rivianlabs/bedrock
• npm/@squawk/airport-data
• npm/@squawk/airports
• npm/@squawk/airspace-data
• npm/@squawk/airway-data
• npm/@squawk/airways
• npm/@squawk/fix-data
• npm/@squawk/fixes
• npm/@squawk/flightplan
• npm/@squawk/geo
• npm/@squawk/mcp
• npm/@squawk/navaids
• npm/@squawk/notams
• npm/@squawk/types
• npm/@squawk/units
• npm/@squawk/weather
• npm/@supersurkhet/cli
• npm/@supersurkhet/sdk
• npm/@tallyui/connector-medusa
• npm/@tallyui/connector-shopify
• npm/@tallyui/connector-vendure
• npm/@tallyui/core
• npm/@tallyui/pos
• npm/@tallyui/theme
• npm/@tanstack/eslint-plugin-router
• npm/@tanstack/history
• npm/@tanstack/nitro-v2-vite-plugin
• npm/@tanstack/react-router
• npm/@tanstack/react-router-ssr-query
• npm/@tanstack/react-start-client
• npm/@tanstack/react-start-rsc
• npm/@tanstack/router-cli
• npm/@tanstack/router-devtools
• npm/@tanstack/router-generator
• npm/@tanstack/router-plugin
• npm/@tanstack/router-ssr-query-core
• npm/@tanstack/router-utils
• npm/@tanstack/solid-router
• npm/@tanstack/solid-start-client
• npm/@tanstack/solid-start-server
• npm/@tanstack/start-static-server-functions
• npm/@tanstack/valibot-adapter
• npm/@tanstack/vue-router-devtools
• npm/@tanstack/vue-start-client
• npm/@tanstack/vue-start-server
• npm/@tanstack/zod-adapter
• npm/@taskflow-corp/cli
• npm/@tolka/cli
• npm/@uipath/access-policy-sdk
• npm/@uipath/agent-tool
• npm/@uipath/agent.sdk
• npm/@uipath/aops-policy-tool
• npm/@uipath/apollo-core
• npm/@uipath/apollo-wind
• npm/@uipath/cli
• npm/@uipath/codedapp-tool
• npm/@uipath/common
• npm/@uipath/context-grounding-tool
• npm/@uipath/data-fabric-tool
• npm/@uipath/filesystem
• npm/@uipath/functions-tool
• npm/@uipath/gov-tool
• npm/@uipath/identity-tool
• npm/@uipath/insights-tool
• npm/@uipath/integrationservice-sdk
• npm/@uipath/llmgw-tool
• npm/@uipath/maestro-sdk
• npm/@uipath/maestro-tool
• npm/@uipath/orchestrator-tool
• npm/@uipath/packager-tool-apiworkflow
• npm/@uipath/packager-tool-bpmn
• npm/@uipath/packager-tool-case
• npm/@uipath/packager-tool-connector
• npm/@uipath/packager-tool-flow