Malicious package index — page 20 of 36

Every malicious-package advisory O3 Security publishes, listed so each one is reachable in a few clicks. 7,137 packages across 36 pages.

• npm/@emilgroup/document-sdk
• npm/@emilgroup/gdv-sdk
• npm/@emilgroup/insurance-sdk-node
• npm/@leafnoise/mirage
• npm/@pypestream/floating-ui-dom
• npm/@teale.io/eslint-config
• npm/babel-plugin-react-pure-component
• npm/cit-playwright-tests
• npm/eslint-config-service-users
• npm/opengov-k6-core
• npm/react-leaflet-cluster-layer
• pypi/lightmock
• pypi/magtape
• pypi/auth0-ai-ms-agent
• pypi/hy-api-utilities
• pypi/sonic-platform-common
• pypi/torchunmix
• npm/repo-typescript-config
• pypi/coreloader
• pypi/databricks-clean-room-orchestrator
• pypi/roboated
• pypi/rocketpill
• pypi/sentry-filter-forks
• pypi/snooty
• pypi/stats-helpers
• pypi/target-iceberg
• npm/@3stripes/api-client
• npm/@at-point/valiant-widgets-v2
• npm/@bingads-webui-cc-react/edit-primary-contact
• npm/@bingads-webui-help/apex.core.v3.min
• npm/@cbreone/micro-ui-survey
• npm/@cewe-onsitesearch/schemas
• npm/@depro-tech/cortana-md
• npm/@dotprompt/promptly-darwin-arm64
• npm/@emerald-react/divider
• npm/@emerald-react/dropdown
• npm/@emerald-react/list
• npm/@fr3newera/baileys
• npm/@iflow-mcp/watercrawl-watercrawl-mcp
• npm/@immuta/pxl-components
• npm/@kinggupong/libsignal-node
• npm/@legacy-ui/core
• npm/@myisrfn/baileys-mod
• npm/@openclaw-ai/openclawai
• npm/@panopto/api-core
• npm/@sky-it-livedata-libraries/livedata-commons-client
• npm/@tl-icons/core
• npm/@uc-platform/user-service-client-ts
• npm/@upstashed/context7-mcp
• npm/@vampirchik147/libxmljs2
• npm/@vtim/xss-poc
• npm/@wealth-common/font
• npm/adobe-tracking
• npm/advertising-events
• npm/alinet
• npm/amt-package-united-icons
• npm/asset-delivery
• npm/backstage-plugin-wpe-catalog
• npm/bcp-security-updates
• npm/bic-seo
• npm/big-nunber
• npm/bign.ts
• npm/braze-content-card-island
• npm/brisk-web-ssr
• npm/bugbounty-test-123
• npm/chai-as-produced
• npm/chai-await-cli
• npm/chai-chai-chain-promised
• npm/chai-promised-plugin
• npm/chain-argon
• npm/chromecast-receiver
• npm/circuit-playground
• npm/client-hash-sdk
• npm/clob-client-sdks
• npm/clob-utils-sdks
• npm/conductor-managed-airflow-environment
• npm/corp-sign-core-js
• npm/couplus-cli
• npm/dappa-libsignal
• npm/date-fns-scripts
• npm/ddddddd1d
• npm/decode-sdk
• npm/delphoi
• npm/delta666
• npm/dotenv-cli-node
• npm/dotenv-int
• npm/dotenv-node-cli
• npm/dotenv-node-promised
• npm/dotenv-nodejs
• npm/dotenv-plugin
• npm/ehance-assistant
• npm/ember-power-calendar-utils
• npm/es-lint-builder
• npm/express-configers
• npm/f0-abstraction-resolver
• npm/falcor-server
• npm/graphql-request-dom
• npm/haodesk-ui
• npm/hydra-node-consent-sdk
• npm/interface-builder-kit
• npm/internal-linking
• npm/internal-secret-project-1234
• npm/iron-image
• npm/iron-pages
• npm/jinja-template
• npm/jwtenv
• npm/kmnb
• npm/kyxhiagent
• npm/libsignal-mod
• npm/libxmljs2-1
• npm/libxmljs2-malicious
• npm/libxmljs2147147
• npm/libxmljsololoq
• npm/lint-builder
• npm/llmstash
• npm/meridix
• npm/metro-evaluator
• npm/n8n-nodes-csv-parse
• npm/n8n-nodes-data-transform
• npm/n8n-nodes-format-utils
• npm/n8n-nodes-json-helper
• npm/n8n-nodes-text-helpers
• npm/n8n-nodes-xml-utils
• npm/navi-design-system
• npm/nest-moralis
• npm/nextiva-dot-com
• npm/node-cli-dotenv
• npm/ok-jest-config
• npm/paramount-cmp-html5
• npm/path-to-regexp-updated
• npm/polygon-gamma-api
• npm/portal-lime
• npm/postcss-hotfix
• npm/pretty-changelog-logger
• npm/pru-lib-ng
• npm/pulse-feature-flag
• npm/rabbitmq-sdk
• npm/rce-pkg-2
• npm/react-native-country-select
• npm/react-native-international-phone-number
• npm/react-query-core-utils
• npm/react-refresh-update
• npm/react-router-on-navigation
• npm/ref-selector
• npm/remitly-blog
• npm/restaking-apy-module
• npm/rollup-plugin-polyfill-build
• npm/rollup-plugin-polyfill-utils
• npm/rtxnode-sass22
• npm/sfx-event-bridge
• npm/shopify-admin-web
• npm/signalk-poc-bug
• npm/smm-yt
• npm/snort-security-tool
• npm/solana-pumpfun-sdk
• npm/ssf-desktop-api-electron
• npm/ssf-desktop-api-specification
• npm/static-content-cannabis
• npm/stnsxmp
• npm/stylelint-preference
• npm/supplychain-security-demo
• npm/supportgameapp
• npm/svg-content-validation
• npm/tachyon-spade-reporter
• npm/tahoe-tap
• npm/tailwindcss-animate-framer
• npm/tailwindcss-animation-advanced
• npm/tailwindcss-style-modify
• npm/technical-assignment
• npm/test-bugbounty-package-6
• npm/test-logsmodule-v-zisko
• npm/testctfproject2
• npm/testctfproject3
• npm/tracking-service-config
• npm/trello-enterprises
• npm/tss12111
• npm/tw-modern-ui
• npm/twitch-twilight-intl
• npm/twitch.dashboard-v2.core
• npm/uipathisfun
• npm/uniswap-info
• npm/urti
• npm/user_migration
• npm/vite-chunker
• npm/vvvv4234
• npm/whatnot-manifests
• npm/whatnot-web
• npm/wildhunter
• npm/wiz-production
• npm/wiz-redirects
• npm/wordpecker-fx
• npm/xc-input-toggle
• npm/xyztttxyz
• npm/yahoo-commerce
• npm/zero-develop-component-library
• pypi/dmclc
• pypi/requests-ml-min
• pypi/rowrap
• pypi/urllib-slim
• pypi/utf-cleaner