OpenSSF Malicious Packages · OSV format
MAL-2026-18419 · Malicious code in vas-tops2-bidmatrix-ui (npm)MAL-2026-18420 · Malicious code in vas-tops2-core-client-cleanup-ui (npm)MAL-2026-18415 · Malicious code in @tops2/digital-assistant-ui (npm)MAL-2026-18423 · Malicious code in vas-tops2-digital-assistant-ui (npm)MAL-2026-18422 · Malicious code in vas-tops2-core-property-search (npm)MAL-2026-18418 · Malicious code in tefeest-npm-com-test (npm)MAL-2026-5267 · Malicious code in wrangler-deploy (npm)MAL-2026-18411 · Malicious code in neuralwhatsapp (npm)MAL-2026-18410 · Malicious code in apex-fetch (npm)MAL-2026-18408 · Malicious code in grizzly-baileys (npm)MAL-2026-18409 · Malicious code in tabby-fknat (npm)MAL-2026-18090 · Malicious code in tailwindcss-visual-kit (npm)MAL-2026-18087 · Malicious code in tailwindcss-effect-lab (npm)MAL-2026-18406 · Malicious code in stdid-nyxprobe (PyPI)MAL-2026-18405 · Malicious code in log-utils-sdk (PyPI)MAL-2026-18403 · Malicious code in twitter-request-diagnostics (PyPI)MAL-2026-18402 · Malicious code in test-01-rafamarrara-learning-dc (PyPI)MAL-2026-18396 · Malicious code in bq-helix-recon-6ade983e (PyPI)MAL-2026-18395 · Malicious code in bq-helix-build-hook-6ade983e (PyPI)MAL-2026-18088 · Malicious code in tailwindcss-keyframe-kit (npm)MAL-2026-18085 · Malicious code in tailwindcss-animate-catalog (npm)MAL-2026-18084 · Malicious code in tailwind-kinetic (npm)MAL-2026-18083 · Malicious code in tailwind-keyframes (npm)MAL-2026-18080 · Malicious code in tailwind-animationlab (npm)MAL-2026-18078 · Malicious code in tailwind-animate-kit (npm)MAL-2026-18394 · Malicious code in react-native-drago-callkit (npm)MAL-2026-18393 · Malicious code in orderbook-volt-plugin (npm)MAL-2026-18391 · Malicious code in m98vip (npm)MAL-2026-18390 · Malicious code in m98th (npm)MAL-2026-18389 · Malicious code in m98bet (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。