Malicious package index — page 25 of 36

Every malicious-package advisory O3 Security publishes, listed so each one is reachable in a few clicks. 7,137 packages across 36 pages.

• npm/@cheqplease/structured-logger
• npm/wds-icons
• npm/gs-uitk-lodash
• npm/libxmljsololo4
• pypi/123bla
• pypi/3web
• pypi/3web-py
• pypi/adanbu
• pypi/adandv
• pypi/artifact-lab-3-package-b55680cd
• pypi/asciidrawing
• pypi/audit-themis-i18n
• pypi/bussardweg4av3
• pypi/bytemlperf
• pypi/bytep
• pypi/bytepilot
• pypi/byterec-models
• pypi/certifications
• pypi/cobo-custdoy
• pypi/coffin-codes-2022
• pypi/coffin-codes-net2
• pypi/comfyui-node-pkg
• pypi/comfyui-node-test
• pypi/cugraph-dgl
• pypi/discord-token-lib
• pypi/distpro
• pypi/ebe
• pypi/ethereun
• pypi/etherim
• pypi/etheriun
• pypi/etherun
• pypi/eutherium
• pypi/ewb3-py
• pypi/fake-usreagant
• pypi/fb303-core
• pypi/filecraft
• pypi/flag-leak-r
• pypi/freelabs
• pypi/get-time-zzs
• pypi/groq-mcp
• pypi/gym-reschdule-combination
• pypi/huggingface-hubs
• pypi/huggingfaces-hub
• pypi/hyper-request
• pypi/importlib-resource
• pypi/inkpy-jinja
• pypi/instacart-roulette-daemon-client
• pypi/jaqmc
• pypi/keras-preprocess
• pypi/macaqua
• pypi/malicus
• pypi/maxpatrol
• pypi/megai
• pypi/mkdocs-with-pdfs
• pypi/oclips
• pypi/omigo-data-analytics
• pypi/openae
• pypi/openai-py3
• pypi/openrea
• pypi/opensae
• pypi/opensar
• pypi/openseaa
• pypi/openseaz
• pypi/opensesa
• pypi/openza
• pypi/package-resources
• pypi/posi
• pypi/postgresql-connector-python
• pypi/pyhton
• pypi/python-project-wntliogu
• pypi/python-uvicorn
• pypi/python3-shodan
• pypi/pytohn
• pypi/requests-rapidly
• pypi/service-affinity-scheduling
• pypi/shot2story
• pypi/soali
• pypi/solana-coin
• pypi/solana-live
• pypi/subdomainer
• pypi/supersafecalc
• pypi/szn-rain-client
• pypi/typing-extension
• pypi/typing-extensions-plus
• pypi/w3eb
• pypi/wave-opensdk
• pypi/wbe3
• pypi/we3b
• pypi/web3-p6
• pypi/web3-po
• pypi/web3-pyu
• pypi/web3dummycti
• pypi/web3e
• pypi/web3q
• pypi/website-scanner
• pypi/webt3
• pypi/wev3
• pypi/wweb
• pypi/yt-yson-bindings
• pypi/zscaner
• pypi/zsender
• npm/callback-hook
• npm/datadog-checks-dependency-provider
• npm/datadog-checks-downloader
• npm/ddp-common
• npm/fastavro
• npm/meteor-developer-oauth
• npm/mongo-decimal
• npm/pymongo
• npm/solana-dexco-basic
• npm/ssf-desktop-api-browser
• npm/wartsila-application-json
• npm/wasm-bindgen
• npm/email-regexed
• npm/sd-123456
• npm/tailwindcss-animation-helper
• npm/hast-util-to-mdast9
• npm/unified10
• npm/elf-stats-cranberry-icicle-864
• npm/elf-stats-jolly-toolkit-984
• npm/elf-stats-joyous-sparkler-347
• npm/elf-stats-merry-stocking-539
• npm/elf-stats-shimmering-muffin-598
• npm/elf-stats-shimmering-pinecone-965
• npm/elf-stats-silvered-bauble-482
• npm/elf-stats-tinsel-giftbox-192
• npm/elf-stats-velvet-ornament-935
• npm/karem1
• npm/karemz
• pypi/atlassian-exp
• pypi/browser-run
• pypi/caas-jupyter-tools
• pypi/d1n0-exploit-aaaa
• pypi/flashinfer
• pypi/google-cloud-iam-credentials
• pypi/hashstation
• pypi/logguru
• pypi/onnxruntime-winml
• pypi/python3-autopep8
• pypi/seclab-research-depconf-test-2
• pypi/selenium-stealth-helper
• pypi/torchflow-experimental
• pypi/vielcord
• pypi/xwormclient
• npm/@jameson777/mytest3
• npm/@pcxm/gasket-single-spa
• npm/@swiggy-private/aatm-nirbhar-build
• npm/@swiggy-private/js-utils
• npm/@testcarrot/supply
• npm/btc-transaction-helper
• npm/buildkite-pipelines
• npm/codemirror-5
• npm/com.unity.sharp-zip-lib
• npm/ctf2libxmljs2
• npm/cx-logger-library
• npm/cyber-fca
• npm/eslint-lodash
• npm/eslint-plugin-unicorn-ts-2
• npm/frontend-photoswipe
• npm/ing-ideal-acquiring-shared
• npm/jfrog-npm-actions-example
• npm/matlab-proxy
• npm/mshops-web-metrics-components
• npm/revit-to-ifc-scheduler
• npm/sing-fest-es-logger
• npm/stream-xor-chain
• npm/szsec-infoss-report
• npm/tailwind-scrollbar-variant
• npm/telegram-api-test
• npm/tensorfi-secure-hash
• npm/test-dependency-confusion-g3ksec
• npm/theta-tv-charts
• npm/types-lodash.es
• npm/vite-plugin-parse-js
• npm/vitest-environment-jsdom-patched
• pypi/regexparam
• npm/02-echo
• npm/@accordproject/markdown-cli
• npm/@accordproject/markdown-it-cicero
• npm/@afetcan/api
• npm/@afetcan/storage
• npm/@alexcolls/nuxt-ux
• npm/@browserbasehq/stagehand
• npm/@chtijs/eslint-config
• npm/@clausehq/flows-step-jsontoxml
• npm/@commute/market-data-chartjs
• npm/@dev-blinq/ai-qa-logic
• npm/@eventcatalog/generator-asyncapi
• npm/@flowfuse/flowfuse
• npm/@freeday-ai/webchat
• npm/@hover-design/react
• npm/@huntersofbook/form-naiveui
• npm/@huntersofbook/i18n
• npm/@huntersofbook/ui
• npm/@ifelsedeveloper/protocol-contracts-svm-idl
• npm/@lessondesk/schoolbus
• npm/@lokeswari-satyanarayanan/rn-zustand-expo-template
• npm/@lui-ui/lui-vue
• npm/@medusajs/analytics-posthog
• npm/@medusajs/medusa