Malicious package index — page 21 of 36

Every malicious-package advisory O3 Security publishes, listed so each one is reachable in a few clicks. 7,137 packages across 36 pages.

• pypi/nump
• pypi/airio
• pypi/composer-dev
• pypi/init2winit
• pypi/mcp-transport-proto
• pypi/nsscache
• pypi/spatialmedia
• npm/@aa-techops-ui/ping-authentication
• npm/@afg-ikea/ikea-family-registration-module
• npm/@brokenzzz/garfish
• npm/@liquid-web/utils
• npm/@navancorp/ta-fe-components
• npm/@polystream/streaming
• npm/@riag-libs/pattern-library-react-hooks
• npm/@self-sell/store
• npm/@servicepoint/vue-project
• npm/@vietmoney/react-big-calendar
• npm/airslate-dep-webpack
• npm/aligntype
• npm/atg-atgse
• npm/babel-js
• npm/bootstrap-setcolors
• npm/cdd-plugin-for-datawarrior
• npm/chai-as-advanced
• npm/chai-as-approved
• npm/chai-as-deployed
• npm/chai-as-executed
• npm/chai-as-tested
• npm/chai-async-promised
• npm/chai-async-test
• npm/chai-dex
• npm/chai-max
• npm/chai-status
• npm/chai-tools
• npm/converse-rn-lib
• npm/cookie-mapper
• npm/dise-pkt
• npm/dotenv-intend
• npm/dotenv-intended
• npm/dotenvx-ext
• npm/dotnetenv
• npm/eb-csr
• npm/elf-stats-candlelit-nutcracker-184
• npm/elf-stats-sugarplum-snowman-116
• npm/eslint-config-minecraft-scripting
• npm/eslint-config-sdk
• npm/expo-audio-session
• npm/express-groups-routes
• npm/express-gueues
• npm/francium-web-visitors
• npm/hammer-jquery
• npm/helium-module
• npm/icon-service
• npm/jz-test-npm
• npm/kyjnzu
• npm/magento-coding-standard-eslint-plugin
• npm/n8n-nodes-gg-udhasudsh-hgjkhg-official
• npm/node-calculator-0d96
• npm/node-dotenv-cli
• npm/oasis-os-provider-messaging
• npm/oci-console-plugin-registry
• npm/openhands-frontend
• npm/plugin-react-swc
• npm/plugin-vue
• npm/prod-natwest
• npm/react-devtools-raycast
• npm/react-dropzone-truffle
• npm/rum-events-format
• npm/sample-custom-component
• npm/sandbox-hooks
• npm/serval-integrations-common-frontend
• npm/shopify-monorail
• npm/sinon-web3-chain
• npm/smart-parser
• npm/solhint-plugin-hyperlane
• npm/sparkling-router
• npm/stylelint-recommended
• npm/supabase-js
• npm/tailwindcss-forms
• npm/tv-admin-commons
• npm/ultimates-express
• npm/uxproject11
• npm/victim-package-b
• npm/viem-js
• npm/vite-dynamic-chunks
• npm/wartsila-text-csv
• npm/yunxohang5
• npm/zalando-consent-api
• npm/zappr
• nuget/Baidu_Іmage_Porn_Identifiсation
• nuget/coinbase.net.api
• nuget/SЅ.CМS
• nuget/SЅ.GоvInteract
• pypi/aioasyncsqlite
• pypi/aiohappyeyeball
• pypi/aiohttp-libscss
• pypi/aiohttp-openssl
• pypi/aiostreams
• pypi/akatest
• pypi/aliyun-python-sdk-v2
• pypi/anaconda-anon-usage
• pypi/anku2-rce
• pypi/apache-airflow-providers-edge
• pypi/appetize-cli
• pypi/appsec-script-py
• pypi/arnold-toolbox
• pypi/atlasctf-21-prod-02
• pypi/audio-separator-fork
• pypi/auth0-open-source-template
• pypi/auto-backup-wins
• pypi/aws-enumerateiam
• pypi/aws-glue
• pypi/awsgluedq
• pypi/bibit
• pypi/binance-sdk-ebate
• pypi/bitforger
• pypi/brotli-python
• pypi/browser-cookies1
• pypi/browser-cookies3
• pypi/browser-history-analysis
• pypi/byted-df
• pypi/byted-flex
• pypi/byted-flux
• pypi/cat-admin-tool
• pypi/ccxt-mexc-futures
• pypi/check-codeowners
• pypi/cloudscrapersafe
• pypi/cmdb-worker-pckg
• pypi/code-tracker
• pypi/coinanalysis
• pypi/coinanalyze
• pypi/coingenerator
• pypi/coloramashowtemp
• pypi/coloryi
• pypi/confluent-docker-utils
• pypi/control4d-multiview
• pypi/cpan
• pypi/credential-python-sdk
• pypi/dahood
• pypi/deepseeek
• pypi/deepseek-fake
• pypi/deepseekai
• pypi/dev-server-python
• pypi/doverius
• pypi/dsodelib
• pypi/electrum-bch
• pypi/embeds
• pypi/enquiry-exam
• pypi/eosio-signer
• pypi/evil-package
• pypi/evil-pkg2
• pypi/falask
• pypi/ferminet-with-ecp
• pypi/final-osint
• pypi/foop
• pypi/free-internet-dns
• pypi/fucknuker
• pypi/gen-user-random-agent
• pypi/glean-indexing-api-client
• pypi/globrex
• pypi/golden-gates
• pypi/hashtools32
• pypi/hellohackers
• pypi/hellopythopyy
• pypi/http-request-toolkit
• pypi/httpx-client
• pypi/initer
• pypi/invokehttp
• pypi/isb
• pypi/iscc-flag
• pypi/justanything
• pypi/kotlin-stdlib-jdk8
• pypi/kraken-virus
• pypi/krisp-audio
• pypi/larpexodus
• pypi/libgomp
• pypi/license-checker
• pypi/logghelper
• pypi/mainx
• pypi/mcp-runcommand-server
• pypi/mcp-runcommand-server2
• pypi/mcp-xyz
• pypi/medoen
• pypi/merbe
• pypi/merpe
• pypi/midi-melody-extraction
• pypi/mlc-llm-nightly-cu123
• pypi/modeflow
• pypi/monlith
• pypi/monolit
• pypi/mumuplayer12
• pypi/music-source-separation
• pypi/musl-dev
• pypi/mvdream
• pypi/myownpyfiglet
• pypi/myproject-bola
• pypi/netfetcher
• pypi/nifty-cli
• pypi/nukeport
• pypi/opengrep