OpenSSF Malicious Packages · OSV format
MAL-2026-11393 · Malicious code in tailwindcssss (npm)MAL-2026-10396 · Malicious code in whatsadmaidk (npm)MAL-2026-10387 · Malicious code in thebigyahu (npm)MAL-2026-5401 · Malicious code in savant-listing (npm)MAL-2026-4655 · Malicious code in qr-code-styling-temp (npm)MAL-2026-14403 · Malicious code in react-emits (npm)MAL-2026-14094 · Malicious code in saps_secplayground_npm_ai (npm)MAL-2026-14093 · Malicious code in rtms-manager-dev (npm)MAL-2026-14092 · Malicious code in rimo-env-validator (npm)MAL-2026-11384 · Malicious code in spectral-corsair (npm)MAL-2026-11382 · Malicious code in socketi (npm)MAL-2026-11381 · Malicious code in soccketio (npm)MAL-2026-10160 · Malicious code in rollup-packages-polyfill-core (npm)MAL-2026-5484 · Malicious code in mcp-server-sequential-thinking (npm)MAL-2026-5480 · Malicious code in mcp-server-notion (npm)MAL-2026-2785 · Malicious code in nemo-jaws (npm)MAL-2026-14087 · Malicious code in mw-filesystem-events-nodream-es6 (npm)MAL-2026-11345 · Malicious code in passtpor (npm)MAL-2026-11344 · Malicious code in passsport1 (npm)MAL-2026-10362 · Malicious code in omgyesyesyes (npm)MAL-2026-10361 · Malicious code in omglucidesotuff (npm)MAL-2026-10335 · Malicious code in miguelphonk (npm)MAL-2025-47594 · Malicious code in paypal-postman-lib (npm)MAL-2024-2871 · Malicious code in pino-deploy (npm)MAL-2026-14083 · Malicious code in heft-storybook-v6-react-tutorial-storykit (npm)MAL-2026-13348 · Malicious code in lakk-analytics (npm)MAL-2026-10333 · Malicious code in lowkirkuenly (npm)MAL-2026-10332 · Malicious code in lowkeybored (npm)MAL-2026-10304 · Malicious code in howmanygreatbritain (npm)MAL-2025-47118 · Malicious code in hrp987 (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。