Malicious package index — page 32 of 36

Every malicious-package advisory O3 Security publishes, listed so each one is reachable in a few clicks. 7,137 packages across 36 pages.

• npm/anidata-haulid-muba
• npm/anidata-hd-maisa
• npm/anidata-hd-masa
• npm/anidata-hd-mata
• npm/anidata-hds-matsfad
• npm/anidata-hopanud-mai
• npm/anidata-huid-mav
• npm/anita-buau-mgis
• npm/anita-butaur-mgfidsa
• npm/anita-butaur-msdagfidsa
• npm/anita-hali-misalania
• npm/anita-hali-misaln
• npm/anita-manhuat-ma
• npm/anjing123
• npm/antares-auth-thuban-semantic-release
• npm/antares-cache-mira-child-process
• npm/antares-chakra-ui-dorado-quasar
• npm/antares-dagda-middleware-eclipse
• npm/antares-nashira-impulse-antares
• npm/antares-promise-thuban-ora
• npm/antares-sedna-rest-europa
• npm/antares-sirius-janus-rest
• npm/antd-gatsby-node-sass-elektra
• npm/antd-meteor-pipe-cosmos
• npm/antd-repository-nightwatch-duplex
• npm/aoifemccarthy
• npm/apakri
• npm/apasih-ld-pokiari
• npm/apasih-ledonf-pold
• npm/apasih-me-pantek
• npm/apasih-memekl-poldoa
• npm/apasih-merah-grsae
• npm/apasih-merahd-grsae
• npm/apex-aldebaran-sass-loader-puppeteer
• npm/apex-bellatrix-lyra-hyperion
• npm/apex-frontend-bootstrap-dynamo
• npm/apex-magellan-winston-phoebe
• npm/apex-native-html-webpack-plugin-betelgeuse
• npm/apollo-backend-callback-cordelia
• npm/apollo-cypress-hugo-capella
• npm/apollo-rate-limiter-hermes-atlas
• npm/apollo-sails-vuepress-chai
• npm/apollo-server-terser-webpack-plugin-quantum
• npm/aps-leadang-mana
• npm/aps-led-manda
• npm/aps-leod-nuiao
• npm/aquarius-sass-loader-morgan-unuk
• npm/aquarius-schema-link-capella
• npm/aquarius-sedna-lint-hermes
• npm/aquarius-xanadu-zephyr-aldebaran
• npm/ariel-postgres-ariel-proxima
• npm/ariel-titan-forever-phoenix
• npm/ariel-zenith-farout-draco
• npm/arif-poke13
• npm/arif-poke52
• npm/arif-poke63
• npm/arif-poke66
• npm/arif-poke78
• npm/arif-poke80
• npm/arif-poke88
• npm/arif-poke9
• pypi/llmboost-hub
• crates/replit_ruspty
• pypi/test422
• pypi/tikweb
• pypi/ipfind-microtip
• pypi/veilcord-tls
• rubygems/aqueduct-client
• rubygems/blackbird-analysis
• rubygems/blackbird-client
• rubygems/chatterbox-client
• rubygems/diet_earthsmoke
• rubygems/diff-analysis
• rubygems/driftwood-client
• rubygems/egress
• rubygems/feature-flags-client
• rubygems/github-kredz
• rubygems/github-orca
• rubygems/monolith-twirp-features-groups
• rubygems/monolith-twirp-github-repositories
• rubygems/monolith-twirp-kredz-core
• rubygems/monolith-twirp-merge-queue-go-mergequeuemonolith
• rubygems/monolith-twirp-octoshift-imports
• rubygems/monolith-twirp-octoshift-migrations
• rubygems/monolith-twirp-pages-pagesdeployerapi
• rubygems/monolith-twirp-spokesd-core
• rubygems/monolith-twirp-webhooks-core
• rubygems/octolytics
• rubygems/proto-dependabot-api
• rubygems/proto-registry-metadata-api
• rubygems/proto-trust-metadata-api
• rubygems/turboghas-client
• pypi/abilityrequests
• pypi/aiohttp-proxies-connector
• pypi/aiohttp-proxies-forked
• pypi/apple-tv-new
• pypi/beautifulsoup-new
• pypi/beautifulsoup4-new
• pypi/certifo
• pypi/certufi
• pypi/change-user-agent
• pypi/crowdnav
• pypi/discord-application
• pypi/discord-selfbot-v1422
• pypi/fiinquantx
• pypi/floogle
• pypi/logging-python
• pypi/loy
• pypi/malicious-pip-package-for-demo
• pypi/mozilla
• pypi/ncurses
• pypi/pkproxy
• pypi/python-dependency-confusion-attacks
• pypi/python-eicar
• pypi/python-kudu
• pypi/requests-2022
• pypi/requests-beta
• pypi/ros2-demo-py
• pypi/rqrqrq
• pypi/rtxt-dep1
• pypi/solution-maker
• pypi/spoof-user-agent
• pypi/toolbelt-requests
• pypi/upgrade-requests
• pypi/uploder-rubika
• pypi/web5
• npm/electron-native-notify
• npm/flatmap-stream
• npm/getcookies
• pypi/keybard
• pypi/bitranox-coloredlogs
• pypi/broccoli-server
• pypi/crawl-requests
• pypi/ensmallen-graph
• pypi/fastybird-devices-module
• pypi/graphalgo
• pypi/karma-jasmine-sinon
• pypi/leip
• pypi/repocket
• pypi/torrent-tracker-scraper
• pypi/worldhello
• pypi/python-coinbase
• pypi/web3-checksum
• pypi/web3-request
• pypi/web3-requests
• pypi/pychaosvm
• pypi/solscan
• rubygems/bvr-api
• pypi/pyhack
• nuget/markdown-to-html
• pypi/cryptographymethods
• pypi/daft-dashboard
• pypi/datasetsgraphviz
• pypi/execjs
• pypi/fenics-dolfinx
• pypi/lalpulsar
• pypi/libmelee
• pypi/msgspec-python313-pre
• pypi/pyroforktgcrypto-pyrofork
• pypi/requests-wiki
• pypi/ska-low-cbf-fpga
• pypi/twilio-rest
• pypi/ytest-cov
• go/github.com/thankfulmai/hypert
• maven/io.github.leetcrunch:scribejava-core
• pypi/blackspammerbd-remot1
• pypi/connector-bsb
• pypi/fakeuseragent
• pypi/account-eth
• pypi/bugscanx
• pypi/bytedance-chat
• pypi/hhxy
• pypi/pylint-redis
• pypi/reqest-dexfree
• pypi/shinel
• pypi/tonki
• pypi/tonvia
• pypi/utils-hex
• pypi/web3-eth
• pypi/cryptoaitools
• pypi/fabricee
• pypi/glovo-data-platform-declarative
• pypi/notoken887
• pypi/py-colorprinting
• pypi/requests-2-32-3
• pypi/rk-pairip
• pypi/rkjp
• pypi/rkpairip
• pypi/treadtools
• npm/@solana/web3.js
• pypi/fabrice
• nuget/AvalonEdit.Net
• nuget/CefSharp.WinForm.Net.Core
• nuget/Chronos.Platforms
• nuget/CitizenFX
• nuget/Crypto.Exchange
• nuget/CsvHelper.Excel.Core.Net
• nuget/dnlib.net
• nuget/HarmonyX.Net
• nuget/Kraken.Exchange