Malicious package index — page 26 of 36

Every malicious-package advisory O3 Security publishes, listed so each one is reachable in a few clicks. 7,137 packages across 36 pages.

• npm/@medusajs/medusa-oas-cli
• npm/@mizzle-dev/orm
• npm/@oku-ui/motion
• npm/@oku-ui/roving-focus
• npm/@oku-ui/switch
• npm/@oku-ui/tabs
• npm/@oku-ui/toggle
• npm/@oku-ui/use-composable
• npm/@oku-ui/utils
• npm/@orbitgtbelgium/mapbox-gl-draw-cut-polygon-mode
• npm/@posthog/heartbeat-plugin
• npm/@posthog/icons
• npm/@posthog/laudspeaker-plugin
• npm/@posthog/lemon-ui
• npm/@posthog/postgres-plugin
• npm/@seezo/sdr-mcp-server
• npm/@silgi/better-auth
• npm/@silgi/drizzle
• npm/@silgi/scalar
• npm/@trackstar/angular-trackstar-link
• npm/@trackstar/react-trackstar-link
• npm/@trpc-rate-limiter/cloudflare
• npm/@trpc-rate-limiter/hono
• npm/@viapip/eslint-config
• npm/@voiceflow/body-parser
• npm/@voiceflow/commitlint-config
• npm/@voiceflow/logger
• npm/@voiceflow/natural-language-commander
• npm/@voiceflow/openai
• npm/@voiceflow/react-chat
• npm/@voiceflow/semantic-release-config
• npm/@voiceflow/stitches-react
• npm/@voiceflow/stylelint-config
• npm/@voiceflow/vitest-config
• npm/@voiceflow/widget
• npm/@vucod/email
• npm/baidu-src-test
• npm/baidu-src-test3
• npm/better-queue-nedb
• npm/blinqio-executions-cli
• npm/bun-plugin-httpfile
• npm/chai-jsons
• npm/chrome-extension-downloads
• npm/command-irail
• npm/create-director-app
• npm/easypanel-sdk
• npm/esbuild-plugin-brotli
• npm/eslint-config-kinvey-flex-service
• npm/expo-router-on-rails
• npm/formik-store
• npm/gatsby-plugin-antd
• npm/get-them-args
• npm/gitsafe
• npm/ids-enterprise-mcp-server
• npm/jquery-bindings
• npm/just-toasty
• npm/kill-port
• npm/kns-error-code
• npm/kubernetes-helm
• npm/kwami
• npm/lang-codes
• npm/lint-staged-imagemin
• npm/markdownlint-cli2-action
• npm/mcp-polymarket
• npm/medusa-plugin-logs
• npm/mongodb-compass
• npm/ngx-useful-swiper-prosenjit
• npm/nnc-web
• npm/nuxt-keycloak
• npm/okta-react-router-6
• npm/posthog-js
• npm/puny-req
• npm/quickswap-sdk
• npm/quickswap-smart-order-router
• npm/react-data-to-export
• npm/react-native-jam-icons
• npm/rediff
• npm/rediff-viewer
• npm/revenuecat
• npm/rpc-validator
• npm/simplejsonform
• npm/solomon-v3-ui-wrapper
• npm/tavily-module
• npm/terrain-sample
• npm/tiptap-shadcn-vue
• npm/vue-browserupdate-nuxt
• npm/wallet-type
• npm/web-types-htmx
• npm/xmenddddl
• npm/zuper-sdk
• nuget/binance.csharp
• pypi/realstarexx
• npm/github-action-for-generator
• maven/org.mvnpm:posthog-node
• npm/@actbase/css-to-react-native-transform
• npm/@actbase/react-absolute
• npm/@actbase/react-daum-postcode
• npm/@actbase/react-native-fast-image
• npm/@actbase/react-native-kakao-navi
• npm/@actbase/react-native-simple-video
• npm/@actbase/react-native-tiktok
• npm/@asyncapi/converter
• npm/@asyncapi/dotnet-rabbitmq-template
• npm/@asyncapi/edavisualiser
• npm/@asyncapi/generator-react-sdk
• npm/@asyncapi/html-template
• npm/@asyncapi/java-spring-cloud-stream-template
• npm/@asyncapi/keeper
• npm/@asyncapi/modelina-cli
• npm/@asyncapi/nunjucks-filters
• npm/@asyncapi/openapi-schema-parser
• npm/@asyncapi/server-api
• npm/@asyncapi/studio
• npm/@asyncapi/web-component
• npm/@caretive/caret-cli
• npm/@ensdomains/ens-avatar
• npm/@ensdomains/ens-test-env
• npm/@ensdomains/ens-validation
• npm/@ensdomains/ensjs
• npm/@ensdomains/eth-ens-namehash
• npm/@ensdomains/hardhat-chai-matchers-viem
• npm/@ensdomains/hardhat-toolbox-viem-extended
• npm/@ensdomains/offchain-resolver-contracts
• npm/@orbitgtbelgium/mapbox-gl-draw-scale-rotate-mode
• npm/@posthog/ai
• npm/@posthog/cli
• npm/@posthog/clickhouse
• npm/@posthog/core
• npm/@posthog/hedgehog-mode
• npm/@posthog/maxmind-plugin
• npm/@posthog/nextjs-config
• npm/@posthog/plugin-unduplicates
• npm/@posthog/rrdom
• npm/@posthog/rrweb-player
• npm/@posthog/rrweb-record
• npm/@posthog/rrweb-snapshot
• npm/@posthog/twilio-plugin
• npm/@posthog/twitter-followers-plugin
• npm/@posthog/web-dev-server
• npm/@postman/final-node-keytar
• npm/@postman/node-keytar
• npm/@postman/pm-bin-windows-x64
• npm/@postman/postman-collection-fork
• npm/@postman/pretty-ms
• npm/@postman/tunnel-agent
• npm/@quick-start-soft/quick-markdown
• npm/@seung-ju/react-hooks
• npm/@strapbuild/react-native-date-time-picker
• npm/@strapbuild/react-native-perspective-image-cropper
• npm/@strapbuild/react-native-perspective-image-cropper-2
• npm/@trigo/atrix
• npm/@trigo/atrix-acl
• npm/@trigo/atrix-mongoose
• npm/@trigo/bool-expressions
• npm/@trigo/pathfinder-ui-css
• npm/@zapier/secret-scrubber
• npm/@zapier/stubtree
• npm/atrix
• npm/atrix-mongoose
• npm/capacitor-plugin-purchase
• npm/coinmarketcap-api
• npm/discord-bot-server
• npm/docusaurus-plugin-vanilla-extract
• npm/esbuild-plugin-httpfile
• npm/hyperterm-hipster
• npm/image-to-uri
• npm/iron-shield-miniapp
• npm/itobuz-angular-button
• npm/mcp-use
• npm/medusa-plugin-announcement
• npm/medusa-plugin-product-reviews-kvy
• npm/mod10-check-digit
• npm/n8n-nodes-tmdb
• npm/n8n-nodes-vercel-ai-sdk
• npm/next-styled-nprogress
• npm/orbit-nebula-editor
• npm/pdf-annotation
• npm/poper-react-sdk
• npm/posthog-docusaurus
• npm/posthog-node
• npm/posthog-plugin-hello-world
• npm/posthog-react-native
• npm/posthog-react-native-session-replay
• npm/prime-one-table
• npm/ra-data-firebase
• npm/react-jam-icons
• npm/react-library-setup
• npm/react-native-get-pixel-dimensions
• npm/react-native-modest-storage
• npm/react-native-retriable-fetch
• npm/react-native-use-modal
• npm/react-native-worklet-functions
• npm/react-qr-image
• npm/redux-forge
• npm/rollup-plugin-httpfile
• npm/sa-company-registration-number-regex
• npm/skills-use
• npm/super-commit
• npm/tanstack-shadcn-table
• npm/tcsp-test-vd