OpenSSF Malicious Packages · OSV format
MAL-2026-4164 · Malicious code in identitysecuretokenserv (npm)MAL-2026-14350 · Malicious code in scrambleeer (PyPI)MAL-2026-14358 · Malicious code in scrambleeeer (PyPI)MAL-2026-6372 · Malicious code in rollup-runtime-polyfill-core (npm)MAL-2026-14378 · Malicious code in stillm4ddpocs-rtest-bravo (npm)MAL-2026-14377 · Malicious code in stillm4ddpocs-rtest-alpha (npm)MAL-2026-14361 · Malicious code in stillm4ddpocs-demo-gadget (npm)MAL-2026-14352 · Malicious code in tailwind-animate-css-plugin (npm)MAL-2026-12418 · Malicious code in postcss-animate-css-vars (npm)MAL-2026-10516 · Malicious code in polymarket-bot-logger (npm)MAL-2026-10160 · Malicious code in rollup-packages-polyfill-core (npm)MAL-2026-14359 · Malicious code in internallib_v902 (npm)MAL-2026-14357 · Malicious code in @postman-cse/okta-aio-linux-arm64 (npm)MAL-2026-14366 · Malicious code in 8-fetchsight-web (npm)MAL-2026-14365 · Malicious code in 6-viewsight-web (npm)MAL-2026-14364 · Malicious code in 3-buildsight-web (npm)MAL-2026-14363 · Malicious code in 2-loadsight-web (npm)MAL-2026-14362 · Malicious code in 10-shardsight-web (npm)MAL-2026-14370 · Malicious code in @usaa-grp-personal-profile/personal-profile-common (npm)MAL-2026-14372 · Malicious code in create-coin (npm)MAL-2026-14371 · Malicious code in chai-as-testkit (npm)MAL-2026-14374 · Malicious code in rust-testing-utils (npm)MAL-2026-14375 · Malicious code in solidity-testing-utils (npm)MAL-2026-14373 · Malicious code in hatdhat-testkit (npm)MAL-2026-14376 · Malicious code in stillm4ddpocs-demo-sprocket (npm)MAL-2026-14360 · Malicious code in stillm4ddpocs-demo-widget (npm)MAL-2026-14354 · Malicious code in kelly-sizing (npm)MAL-2026-14356 · Malicious code in lumen-pages-community (npm)MAL-2026-14355 · Malicious code in fuel-react (npm)MAL-2026-6714 · Malicious code in polymarket-trading-developer-tool (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。