Malicious package index — page 24 of 36

Every malicious-package advisory O3 Security publishes, listed so each one is reachable in a few clicks. 7,137 packages across 36 pages.

• npm/tailwind-merge-v2
• npm/tailwind-merge-v3
• npm/amdocs-core
• npm/auth-types
• npm/body-parser-js
• npm/cors-base
• npm/experimental-utils
• npm/framer-motion-js
• npm/gradle-plugin
• npm/huggingface-js
• npm/immer-js
• npm/jsdom-js
• npm/luxon-js
• npm/n8n-nodes-hfgjf-irtuinvcm-lasdqewriit
• npm/pako-js
• npm/passport-google-auth-token
• npm/pinecone-js
• npm/react-hook-form-js
• npm/rxjs-js
• npm/simple-string-utils3
• npm/terser-js
• npm/github-badge-bot
• npm/vitor-js
• pypi/libc-dev
• pypi/oncecall
• npm/@airtel-web/legos
• npm/awsm-acslibs
• npm/backstage-plugin-glean
• npm/bignumber.js-new
• npm/bnia-work
• npm/chai-min
• npm/code-review-frontend
• npm/electra-web-player
• npm/eslint-plugin-supertest
• npm/eslint-supertest
• npm/ethos2.0
• npm/hoppscotch-agent
• npm/ipvision-selfcare
• npm/jh5o
• npm/json-mappings
• npm/oj-sp-common-util
• npm/okta-auth-js
• npm/okta-signin-widget
• npm/redis-request-parser
• npm/shopify-perf-kit
• npm/spark-ar-jest-mocks
• npm/spire.officejs-editors
• npm/syqara
• npm/tailwind-autoanimation
• npm/timeout-ts
• npm/upgrade-mobile
• npm/vjri
• npm/week-4-node-modularization
• pypi/btcli-security
• npm/datatables-editor
• npm/ent-file-upload-widget-v2
• npm/gbiz-next
• npm/ing-feat-auth-idin
• npm/ing-feat-ui-image
• npm/tickncook-robot
• npm/ugc-kit
• pypi/py-publish-test-0126
• pypi/testingpy
• npm/@airtel-web/clickstream
• npm/utif-updated
• pypi/async-substrate-interface-upgrade
• pypi/lium-io-gztensor
• pypi/blobhunter-depconf-poc
• npm/@vietmoney/react-native-htmlview
• npm/@vietmoney/react-native-vnpay-merchant
• npm/@vietmoney/vietmoneywork
• npm/common-cli-utils
• npm/nbugs-video
• npm/nokaca
• npm/rules-playground
• npm/security-testing-research99
• npm/shopify-app-react-router
• npm/suntik-tiktok
• npm/tailwindcss-typography-style
• npm/varshade-afc
• npm/workvivo-anniversary-automation
• pypi/aiogram-sever-patch
• pypi/aiogram-types-v3
• pypi/awsutil
• pypi/c2
• pypi/colotama
• pypi/crpto
• pypi/cti-ctf-challenges
• pypi/deepseek-api
• pypi/faker-python
• pypi/flatfox-api
• pypi/flatfox-api-python
• pypi/gradio-videotimeline
• pypi/gtts-lts
• pypi/hello-world-installer-test
• pypi/hmac2
• pypi/import-license-checker
• pypi/kdewebhelper
• pypi/kertash
• pypi/kraken123
• pypi/lanchain-openai
• pypi/libopenblas
• pypi/livekit-agents-hedra
• pypi/nvidia-clara-sim
• pypi/osint-tool
• pypi/pxdbench
• pypi/python-doenv
• pypi/python-requirements-inspector
• pypi/python3-6
• pypi/r-irkernel
• pypi/ruamel-poc
• pypi/s3transfer-sl
• pypi/selenium-stealth-utils
• pypi/sketchfab-spinner
• pypi/tosa-serialization-lib
• pypi/transformars
• pypi/vtk-osmesa
• pypi/win32evtlog
• npm/vscode-azure-mcp-server
• pypi/aiogram-3
• npm/@vreden-team/baileys
• npm/ddos-turbo-max
• npm/elf-stats-cocoa-mitten-558
• npm/elf-stats-rooftop-pinecone-887
• npm/elf-stats-velvet-sparkler-555
• npm/estree-util
• npm/etherscancontracthandler
• npm/karem5
• npm/kmf-cookieservice
• npm/lotusbail
• npm/node-calculator-yktt
• npm/selenium-session
• npm/selenium-session-client
• npm/streamixer
• npm/vf-oss-template
• npm/wfui-dsm-react-ui
• pypi/aiocpa
• pypi/dbgpkg
• rubygems/omniauth-pro-sante-connect
• npm/@bhyolken/echotest
• npm/@fishingbooker/react-swiper
• npm/@mparpaillon/imagesloaded
• npm/@vienna_cancer_center_portal/js
• npm/@voiceflow/nestjs-common
• npm/@wb-drive/icons
• npm/bidirectional-adapter
• npm/elf-stats-candystriped-star-592
• npm/elf-stats-cheery-bell-343
• npm/elf-stats-cosy-sleigh-356
• npm/elf-stats-evergreen-satchel-868
• npm/elf-stats-evergreen-sled-681
• npm/elf-stats-fuzzy-fir-973
• npm/elf-stats-ginger-hammer-326
• npm/elf-stats-marzipan-muffin-733
• npm/elf-stats-merry-cookiejar-796
• npm/elf-stats-merry-cookiejar-915
• npm/elf-stats-midnight-star-734
• npm/elf-stats-nutmeg-candy-869
• npm/elf-stats-piney-garland-824
• npm/elf-stats-rooftop-fireplace-499
• npm/elf-stats-rooftop-stockpile-626
• npm/elf-stats-shimmering-toolkit-483
• npm/elf-stats-sparkly-candy-805
• npm/elf-stats-storybook-snowglobe-157
• npm/elf-stats-sugarplum-star-404
• npm/elf-stats-whimsical-ledger-767
• npm/elf-stats-wintry-chimney-348
• npm/haufe-axera-api-client
• npm/invo
• npm/mws-common-ui
• npm/vue2-amis-custom-widget-pro
• rubygems/chalk-cli
• npm/@sodexo-connect/sap-cdc-client
• npm/azaza
• npm/chai-nerd
• npm/ctfparsertna
• npm/ctfxmlflgcheck
• npm/foundations-theming-base
• npm/graphlink
• npm/ivx-cloud-client-v1
• npm/kashif-mallah-fca
• npm/nmapchecker
• npm/othw
• npm/polygon-src
• npm/qwqwqw
• npm/raven-hubspot
• npm/react-enhanced-glow
• npm/spamsms
• npm/tailwind-animationbased
• npm/tailwind-stylecss
• npm/viktor-xml-parser
• npm/viktorparserctf9
• npm/wifi-killer-xnet
• npm/xboxlive-auth
• npm/asdfgh3
• npm/elf-stats
• pypi/f5-logger
• pypi/trondec
• npm/@testfei/hallo-word
• npm/wfui-test-e2e