OpenSSF Malicious Packages · OSV format
MAL-2026-5896 · Malicious code in jest-test-plugin-utils (npm)MAL-2026-13348 · Malicious code in lakk-analytics (npm)MAL-2026-10637 · Malicious code in mc-reg (npm)MAL-2026-14318 · Malicious code in frenchworldcupwin (npm)MAL-2026-14317 · Malicious code in fetch-webjs-script (npm)MAL-2026-14331 · Malicious code in exam-kit (npm)MAL-2026-14326 · Malicious code in create-react-app-ux (npm)MAL-2026-14325 · Malicious code in create-react-app-ui (npm)MAL-2026-14324 · Malicious code in create-react-app-text (npm)MAL-2026-14330 · Malicious code in @pablo_clueless/sniffr (npm)MAL-2026-14329 · Malicious code in @pablo_clueless/printr (npm)MAL-2026-11146 · Malicious code in sigchain-js (npm)MAL-2026-4642 · Malicious code in polygon-toolkit-validate (npm)MAL-2026-12415 · Malicious code in pfp-forms-sme-sitebuilder (npm)MAL-2026-12414 · Malicious code in pfp-forms-sme-loan (npm)MAL-2026-12412 · Malicious code in pfp-forms-independent-sme-glossary-anchor (npm)MAL-2026-12410 · Malicious code in pfp-block-mobile-steps (npm)MAL-2026-12406 · Malicious code in pfa-errors (npm)MAL-2026-12186 · Malicious code in pfp-forms-insurance-health (npm)MAL-2026-12041 · Malicious code in platform-ui-codemods (npm)MAL-2026-13302 · Malicious code in dolyame-boxy-desktop-bnpl-card-panel (npm)MAL-2026-12855 · Malicious code in bigops-watchdog-angular (npm)MAL-2026-12852 · Malicious code in bigops-umf-statist (npm)MAL-2026-12691 · Malicious code in devplatform-api-clients (npm)MAL-2026-14328 · Malicious code in goldstar-api-server (npm)MAL-2026-14327 · Malicious code in ethereum-validator (npm)MAL-2026-10106 · Malicious code in rallycoding (npm)MAL-2026-10103 · Malicious code in optimize-regex (npm)MAL-2026-5735 · Malicious code in node-multi-downloader (npm)MAL-2026-5450 · Malicious code in o3forms (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。