Malicious package index — page 19 of 36

Every malicious-package advisory O3 Security publishes, listed so each one is reachable in a few clicks. 7,137 packages across 36 pages.

• npm/nj-logger
• npm/node-red-contrib-yolo-object-detection
• npm/otomi-tasks
• npm/pa-marked
• npm/paysafe-card-payments
• npm/paysafe-google-pay
• npm/paysafe-payments-sdk-common
• npm/pgserve
• npm/pil2-proofman-js
• npm/portal-common-ui
• npm/react-appfabric-shell
• npm/react-dom-19
• npm/react-hook-form
• npm/rollup-plugin-polyfill-route
• npm/rtxaspnet
• npm/sanitize-url
• npm/sfx-data
• npm/sparkling-sdk
• npm/stacks-editor
• npm/tailwind-stylecss-typography
• npm/tailwindcss-style-typography
• npm/trade-in-lib
• npm/ts-form-helpers
• npm/ts-schema-helpers
• npm/ts-utils-dev
• npm/unisys-agentic-ai-playground
• npm/unisys-uka
• npm/upstart-loan-status
• npm/vime-azl
• npm/walmart-internal
• pypi/jie-utility-package
• pypi/lyrox
• pypi/k8s-node-health
• pypi/kube-health-tools
• pypi/kube-node-health
• pypi/noonutil
• pypi/pymatcha
• pypi/pypdf-fork
• pypi/python-ledgercommon
• pypi/runtimeutils
• pypi/soopsocks
• pypi/spy-ai
• pypi/telcoo
• pypi/cycode-dev
• pypi/leavemealone
• npm/teaser-nav
• pypi/aet-test
• pypi/ixosrestinterface
• pypi/procoder
• pypi/shan-lib-poc
• pypi/sher-server-tool
• npm/8x8-developer-docs
• npm/@ev-tech/eva-container-api
• npm/@metaplex-foundations/umi-public-keys
• npm/bigmathex
• npm/bigmathix
• npm/bigmathlib
• npm/chai-as-chayn
• npm/chai-as-emitted
• npm/cr-static-shared-components
• npm/dell-fusion-core-drzak
• npm/el-icon
• npm/f0-service-address-doctor
• npm/fadlsjf
• npm/frontend-js-state-web
• npm/hackerhacker
• npm/json-lucide
• npm/nodex-db
• npm/path-external
• npm/pino-sdk
• npm/react-state-optimizer-core
• npm/tailwind-compile
• npm/tokenshower
• npm/whatsapp-core-auth-drzak
• pypi/bombonsec-test-123
• pypi/emergentintegrations
• pypi/nflx-metaflow
• pypi/requests-testik11
• pypi/ccxt-telemetry
• npm/@adac-fahrzeugplattform/ui
• npm/admin0911
• npm/partner-tracker
• npm/vv-ftend-api
• npm/vv-ftend-core
• pypi/7miners
• pypi/ant-mcp-proxy-for-test
• pypi/buildenv-telemetry
• pypi/gate-apis
• pypi/kryptex-os
• pypi/hive-setting
• pypi/hex2pcap
• pypi/ixosmonitoring
• pypi/ks-hex2pcap
• pypi/python-aickerso
• npm/@fairwords/encryption
• npm/argon2-napi
• npm/strapi-plugin-cache
• pypi/anduril-sdk
• pypi/bitcommit
• pypi/bogus-nydus-op
• pypi/causal-canvas
• pypi/emd-ext
• pypi/falador
• pypi/gd-auth
• pypi/gd-auth-sso
• pypi/libavcodec-extra
• pypi/noonhelpers
• pypi/roku-aihub
• pypi/fluxhttp
• pypi/kraken-trader
• pypi/license-utils-kit
• pypi/sentinel-tool
• npm/@wame/ngx-adfs
• npm/@wame/ngx-frf-utilities
• npm/axios
• npm/base-or-engine
• npm/base-x-64
• npm/chai-as-aligned
• npm/chai-as-attached
• npm/chain-multer
• npm/corsair-module
• npm/ecto-spirit-core
• npm/env-node-cli
• npm/ethersproject-wallet
• npm/ftapi-core
• npm/jellyfi-pino-pretty-logger
• npm/jonas-prettier-logger
• npm/mcp-server-todo
• npm/merchant-rps
• npm/node-multer
• npm/osc-datagrid-validator
• npm/product-status
• npm/strapi-plugin-api
• npm/strapi-plugin-cms-tools
• npm/strapi-plugin-database
• npm/strapi-plugin-form
• npm/strapi-plugin-health-check
• npm/strapi-plugin-logger
• npm/strapi-plugin-nordica-recon
• npm/strapi-plugin-nordica-vhost
• npm/strapi-plugin-sitemap-gen
• npm/this-is-my-test-package
• npm/wraith-module
• pypi/genesis-1p-tools-rpm-bundle
• pypi/discord-request
• pypi/supervisors
• npm/@global-dax-ad-platform/dax-types
• npm/aaaaaxxxxx
• npm/chai-as-proofed
• npm/chai-pack
• npm/demo-ip-package
• npm/demo-ip-package-cm
• npm/ethersnode
• npm/flycord
• npm/fps-logger
• npm/js-nodecat
• npm/json-merge-tool
• npm/json-specparse
• npm/jsonify-core
• npm/pcl-build-docroot
• npm/praxis-scripts
• npm/xpack-per-device
• npm/xpack-video-submission
• pypi/eht-account
• pypi/ibmodules
• pypi/polymarkets-sdk
• pypi/pygithub-async-utils
• pypi/thief-utils
• pypi/usvr-agent
• npm/@pumpfun-ipfs/sdk
• npm/@shennmine/baileys
• npm/@shennmine/libsignal-node
• npm/@solana-ipfs/sdk
• npm/@universeorg/dotenv
• npm/@validator-lut-sdk/v3
• npm/agoda-test-poc
• npm/customerdigital-ui-components-lib
• npm/dgxeon-soket-buttonx
• npm/eslint-validator
• npm/react-autolink-text
• npm/react-leaflet-marker-layer
• npm/sbx-mask
• npm/shop-republik-ch
• npm/simple-util-kit
• npm/super-alias
• npm/ts-bign
• npm/yelp-mobile-site-common
• pypi/lakeflow-community-connectors
• pypi/latinum-wallet-mcp
• pypi/prodaccess
• pypi/interwebz
• pypi/aiogram-photo-updater
• pypi/python-aiogram-telegram-updater
• pypi/claude-lite
• pypi/gemini-ai-api
• pypi/metamask-api
• pypi/solana-api
• pypi/telnyx
• npm/@emilgroup/billing-sdk
• npm/@emilgroup/customer-sdk