OpenSSF Malicious Packages · OSV format
MAL-2026-12685 · Malicious code in delivery-ci-update-gitlab (npm)MAL-2026-12681 · Malicious code in delivery-ci-storybook (npm)MAL-2026-12680 · Malicious code in delivery-ci-sage (npm)MAL-2026-12666 · Malicious code in crypto-checkout-api (npm)MAL-2026-12513 · Malicious code in async-mutex-lock (npm)MAL-2026-12361 · Malicious code in deposits-overnight (npm)MAL-2026-12346 · Malicious code in cardsmobile-collection (npm)MAL-2026-12342 · Malicious code in boxy-fixture-allure (npm)MAL-2026-12172 · Malicious code in bigops-voximplant (npm)MAL-2026-12149 · Malicious code in bigops-auth (npm)MAL-2026-12148 · Malicious code in bigops-api-mobile (npm)MAL-2026-12146 · Malicious code in beaver-ui-hooks (npm)MAL-2026-12145 · Malicious code in beaver-ui-form-object (npm)MAL-2026-10722 · Malicious code in @whalent/agent-core (npm)MAL-2026-13372 · Malicious code in eth-account-wallet (PyPI)MAL-2026-13376 · Malicious code in claude-remote-agent (npm)MAL-2026-12839 · Malicious code in bigops-tcrm-permissions (npm)MAL-2026-13374 · Malicious code in @chnayser/server (npm)MAL-2026-13377 · Malicious code in ezdiscordbots (npm)MAL-2026-13378 · Malicious code in npm-dc-dev (npm)MAL-2026-13375 · Malicious code in app-api-sdk (npm)MAL-2026-13361 · Malicious code in defi-sdk-py (PyPI)MAL-2026-13371 · Malicious code in multi-acct (npm)MAL-2026-13368 · Malicious code in express-dever (npm)MAL-2026-12378 · Malicious code in express-rate-controller (npm)MAL-2026-4526 · Malicious code in claw_messenger (npm)MAL-2026-4508 · Malicious code in cdk-insights (npm)MAL-2026-13365 · Malicious code in @stageflight-testbed/a (npm)MAL-2026-13367 · Malicious code in clawtrl-wallet (npm)MAL-2026-13277 · Malicious code in dlab_workshop (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。