OpenSSF Malicious Packages · OSV format
MAL-2026-10296 · Malicious code in bomboclatwallahi (npm)MAL-2026-10295 · Malicious code in bismillahitidakimas (npm)MAL-2025-1210 · Malicious code in chakll (npm)MAL-2023-1111 · Malicious code in afterpay-sdk-example-server (npm)MAL-2026-6183 · Malicious code in @mep-exp/api-tools (npm)MAL-2026-5430 · Malicious code in @sourceflow-uk/sourceflow-tracker (npm)MAL-2026-5429 · Malicious code in @shell-landing/routes (npm)MAL-2026-5428 · Malicious code in @shell-cabinet/routes (npm)MAL-2026-5410 · Malicious code in @easy-entry/routes (npm)MAL-2026-5409 · Malicious code in @easy-entry/outside-registration-fop-navigator (npm)MAL-2026-5408 · Malicious code in @easy-entry/landing-routes (npm)MAL-2026-5392 · Malicious code in @open-banking/cabinet-providers (npm)MAL-2026-2523 · Malicious code in @telekom-wfa/auth-core (npm)MAL-2026-14073 · Malicious code in @veertly/web-app (npm)MAL-2026-11439 · Malicious code in @global-theme/context (npm)MAL-2026-11434 · Malicious code in @404c3s4r/lodash (npm)MAL-2026-11222 · Malicious code in @patternfly-4/react-tokens (npm)MAL-2026-11221 · Malicious code in @patternfly-4/react-table (npm)MAL-2026-11220 · Malicious code in @patternfly-4/react-core (npm)MAL-2026-11219 · Malicious code in @patternfly-4/quickstarts (npm)MAL-2026-11214 · Malicious code in @grua/icons (npm)MAL-2026-11211 · Malicious code in @ethers-sdk/wallet (npm)MAL-2026-11207 · Malicious code in @404c3s4r/testxxx (npm)MAL-2025-789 · Malicious code in aaaa89852889 (npm)MAL-2025-6395 · Malicious code in aave-improvement-process (npm)MAL-2025-5016 · Malicious code in 0vulns-dependency-confusion-poc (npm)MAL-2025-48477 · Malicious code in ab-test-wordpress (npm)MAL-2024-9490 · Malicious code in @zva/web (npm)MAL-2024-9489 · Malicious code in @zhiend989/asdfqwer (npm)MAL-2024-8838 · Malicious code in @zarafront/lib-zds (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。