OpenSSF Malicious Packages · OSV format
MAL-2026-18318 · Malicious code in @greenlake/mfe-login-url (npm)MAL-2026-18317 · Malicious code in @greenlake/context-pane (npm)MAL-2026-18287 · Malicious code in @ppa-web-components/ppa-searchform (npm)MAL-2026-18286 · Malicious code in @ppa-web-components/ppa-navigation (npm)MAL-2026-18283 · Malicious code in @greenlake/session (npm)MAL-2026-18282 · Malicious code in @greenlake/common-context (npm)MAL-2026-18277 · Malicious code in @drone-js-ext/vip-badge (npm)MAL-2026-18273 · Malicious code in @ppa-web-components/ppa-builder (npm)MAL-2026-18272 · Malicious code in @ppa-web-components/ppa-banner (npm)MAL-2026-18212 · Malicious code in @blueskydataplatform/shared-ui (npm)MAL-2026-17899 · Malicious code in @flexmr/survey-conversation (npm)MAL-2026-17898 · Malicious code in @flexmr/survey-client (npm)MAL-2026-17888 · Malicious code in @flexmr/utils (npm)MAL-2026-2144 · Malicious code in litellm (PyPI)MAL-2026-18328 · Malicious code in netweavex (PyPI)MAL-2026-18326 · Malicious code in changes-lxc-wrapper (PyPI)MAL-2026-18296 · Malicious code in zagents-message-bus (PyPI)MAL-2026-18293 · Malicious code in w-mousekey (npm)MAL-2026-18237 · Malicious code in slatejob (PyPI)MAL-2026-18229 · Malicious code in juniperrun (PyPI)MAL-2026-18228 · Malicious code in jobwharf (PyPI)MAL-2026-18222 · Malicious code in badgertask (PyPI)MAL-2026-18197 · Malicious code in x402-prompt-injection-scan (npm)MAL-2026-18171 · Malicious code in ttsprobe (PyPI)MAL-2026-18161 · Malicious code in evalstream (PyPI)MAL-2026-18158 · Malicious code in audiokit (PyPI)MAL-2026-18149 · Malicious code in vellutts (PyPI)MAL-2026-18146 · Malicious code in shellgrip (PyPI)MAL-2026-18145 · Malicious code in quillonatts (PyPI)MAL-2026-18143 · Malicious code in phonoviatts (PyPI)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。