Malicious package index — page 18 of 36

Every malicious-package advisory O3 Security publishes, listed so each one is reachable in a few clicks. 7,137 packages across 36 pages.

• npm/@uipath/platform-tool
• npm/@uipath/project-packager
• npm/@uipath/resources-tool
• npm/@uipath/rpa-legacy-tool
• npm/@uipath/rpa-tool
• npm/@uipath/solution-packager
• npm/@uipath/solutionpackager-sdk
• npm/@uipath/solutionpackager-tool-core
• npm/@uipath/tasks-tool
• npm/@uipath/telemetry
• npm/@uipath/test-manager-tool
• npm/@uipath/tool-workflowcompiler
• npm/@uipath/traces-tool
• npm/@uipath/ui-widgets-multi-file-upload
• npm/@uipath/vertical-solutions-tool
• npm/@uipath/vss
• npm/@uipath/widget.sdk
• npm/@w3m-app/get_chain_id
• npm/apple-internal-security-library-v99
• npm/auth0-ui-components-docs
• npm/bpmn-studio
• npm/browserslist-db
• npm/cmux-agent-mcp
• npm/coral-dev-proxy
• npm/cplace-bmw-emt-mvp
• npm/edj-shopify-theme
• npm/git-git-git
• npm/google-storage-cloud
• npm/honcho-theme
• npm/housecallpro
• npm/internal-company-module-test-1337
• npm/justenv
• npm/ml-toolkit-ts
• npm/next-rwa
• npm/nextmove-mcp
• npm/noon-contracts
• npm/oneblk-design-system
• npm/pi-exa-mcp
• npm/playgod
• npm/pos-next-react-native
• npm/react-native-parallax-scroll-view-updated
• npm/safe-action
• npm/sagat-core
• npm/shopify-draggable
• npm/tinfoil-shops
• npm/trevlo
• npm/update-db
• npm/vpi-guides
• npm/wot-api
• pypi/crazehub
• pypi/enhancer
• pypi/guardrails-ai
• pypi/kaggle-runner
• pypi/ninja-core-optimizer
• pypi/ninja-core-utils
• pypi/textwrap-ext
• npm/briantreehttp
• npm/camelotlabs-config
• npm/camelotlabs-core
• npm/camelotlabs-sdk
• pypi/apkeep
• pypi/django-b64-img
• pypi/python-bittensor-config-v2
• npm/typo-crypto
• pypi/crypto-bot-utils
• pypi/eth-web3-utils
• pypi/solana-wallet-sdk
• pypi/tron-energy-sdk
• pypi/wallet-scanner-pro
• pypi/web3-connect
• pypi/playwright-atoned
• pypi/runtime-probe
• npm/@activation_code/activate
• npm/@alfa.life.mapp/app.web
• npm/@automation-toolchain/f5-cloud-libs
• npm/@google-pay-trust/init-google-pay
• npm/@m0ntana/app.web
• npm/@ozon-complt/split
• npm/@pyme-web/ui-base
• npm/@pyme-web/ui-widget
• npm/@taxmoninor/taxmon
• npm/@w3m-frame/session_update
• npm/axis-abc-portal-menu
• npm/axis-charts
• npm/axis-ui-generator
• pypi/cloudauth-sdk
• pypi/gauth-client
• pypi/puan4
• pypi/sf-th-requests
• pypi/sf-vmeval-requests
• pypi/system-update-tool
• pypi/oracle-lag-sniper
• npm/gunpowder-ghost
• npm/sirens-lament
• pypi/httpx-utils
• pypi/py-clob-clients
• pypi/renderctx
• pypi/tns-py
• npm/@cap-js/db-service
• npm/@cap-js/sqlite
• npm/classlink
• npm/coinmate-typescript-client
• npm/frank-newton3-db-final
• npm/mbt
• npm/nicegui
• npm/react-dnd-14
• npm/redeem-onchain-sdk
• npm/shopify-app-extension-template
• npm/tanstack
• pypi/amazon-boto
• pypi/bbranger
• pypi/coinmate-api
• npm/@storylane/shared-packages
• npm/dazaar-payment
• npm/developit
• npm/filenames-simple
• npm/google-camelcase
• npm/ignore-html-and-css-imports
• npm/import-zod
• npm/lit-a11y
• npm/minify-replace
• npm/monorepo-cop
• npm/peer-deps-external
• npm/proposal-typescript
• npm/react-you-might-not-need-an-effect
• npm/styled-components-a11y
• npm/transform-dev
• npm/transform-dynamic-import
• npm/transform-jsbi-to-bigint
• npm/transform-proto-to-assign
• npm/transform-react-jsx
• npm/transform-remove-debugger
• npm/transform-typescript
• npm/typescript-react-query
• npm/typescript-resolvers
• npm/typescript-rtk-query
• npm/typescript-type-graphql
• npm/typescript-urql
• npm/vitest-globals
• npm/yoshi-base
• pypi/fetch-data-api-syncapi
• pypi/byteclaw
• pypi/bytedark
• pypi/mypypipkg
• pypi/swisscom-ai-research-keyphrase
• pypi/ort-moe
• npm/amazon-q-developer-streaming-client
• npm/react-spa-shadcn
• pypi/swampo
• npm/@automagik/genie
• npm/@b2b-portal/kit
• npm/@bitwarden/cli
• npm/@bmg-web/bmg-ajax
• npm/@bmg-web/bmg-checkbox
• npm/@bmg-web/bmg-dropdown
• npm/@gameforge/http-server
• npm/@hrb-web/nuxt
• npm/@indriver-poc/whisperwind
• npm/@openwebconcept/theme-owc
• npm/@otaxayuns/baileys
• npm/@sap-px/pxapi
• npm/@spinstorm/shared
• npm/@stlm/common-ui
• npm/@tableau__catalog-messages/database_lower
• npm/@than-xs/libsignal-node
• npm/@tushar-br/editing-pack
• npm/ac-sasskit-internal
• npm/agent-framework-web
• npm/apple-idms-internal
• npm/babel-plugin-blocks
• npm/bfx-hf-strategy-perf
• npm/bignum-ts-v2
• npm/browserstack-utils
• npm/buildkite-test-collector-jest-example
• npm/buildkite-test-collector-playwright-example
• npm/buildkite-test-collector-vitest-example
• npm/chai-as-nobj
• npm/chai-as-optimized
• npm/chief-proxy-out
• npm/claudcode-cli
• npm/color-studio
• npm/conventional-changelog-dash
• npm/conversation-relay
• npm/deployer-kit
• npm/dotenv-pack
• npm/etsy-advocacy
• npm/f0-email-verification
• npm/gemini-cli-vscode-ide-companion
• npm/ghscan-pkgcheck-test-001
• npm/gp-auth-lib
• npm/h3-next
• npm/insomnia-api
• npm/insomnia-scripting-environment
• npm/insomnia-smoke-test
• npm/lightweight-charts-4.1
• npm/linode-developers
• npm/megabank-worklist
• npm/metrify-chain
• npm/mongoose-stamps
• npm/mypeopledoc