OpenSSF Malicious Packages · OSV format
MAL-2026-14396 · Malicious code in sm-cart (npm)MAL-2026-14395 · Malicious code in sm-billing-form (npm)MAL-2026-14394 · Malicious code in sm-apikey-model (npm)MAL-2026-14393 · Malicious code in sm-admin (npm)MAL-2026-12073 · Malicious code in sso-tramvai-module-context-auth (npm)MAL-2026-12730 · Malicious code in devplatform-nx-ts (npm)MAL-2026-14417 · Malicious code in dims-svelte-ui (npm)MAL-2026-14419 · Malicious code in tkyoussef-hb (npm)MAL-2026-12441 · Malicious code in sme-scripts-shared-library-webpack-plugin (npm)MAL-2026-12440 · Malicious code in sme-rko-finance-front-shared-entity-groups-models (npm)MAL-2026-12208 · Malicious code in sme-scripts-cli (npm)MAL-2026-12072 · Malicious code in specials-obid-webpack (npm)MAL-2026-12071 · Malicious code in sotqa-test (npm)MAL-2026-12763 · Malicious code in devplatform-spa-plugin-cobrowsing (npm)MAL-2026-14443 · Malicious code in @elc-online/up-analytics (npm)MAL-2026-14412 · Malicious code in @deepaksilaych/sess (npm)MAL-2026-14415 · Malicious code in react-dynamic-parser (npm)MAL-2026-14444 · Malicious code in msrcpoc (PyPI)MAL-2026-12070 · Malicious code in shopping-shared-atom-mobile-cart-counter (npm)MAL-2026-10107 · Malicious code in security-node (npm)MAL-2026-14268 · Malicious code in no-for-of-loops (npm)MAL-2026-14409 · Malicious code in polis-diraja (npm)MAL-2026-12220 · Malicious code in tailwind-animationpack (npm)MAL-2026-12219 · Malicious code in tailwind-animationgroup (npm)MAL-2026-14403 · Malicious code in react-emits (npm)MAL-2026-14402 · Malicious code in agentgui (npm)MAL-2026-14379 · Malicious code in totp-utils (npm)MAL-2026-14384 · Malicious code in mlflow-otel-instrumentor (PyPI)MAL-2026-14389 · Malicious code in envprovision (PyPI)MAL-2026-14388 · Malicious code in cryptgraphy (PyPI)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。