OpenSSF Malicious Packages · OSV format
MAL-2026-14489 · Malicious code in hydration-cls-ui (npm)MAL-2026-14429 · Malicious code in dim-hydration-ui (npm)MAL-2026-14515 · Malicious code in wm-lib-env-provider (npm)MAL-2026-14514 · Malicious code in wm-eslint-fe (npm)MAL-2026-14508 · Malicious code in hexdrift (npm)MAL-2026-14507 · Malicious code in foldmap (npm)MAL-2026-14510 · Malicious code in snapbuf (npm)MAL-2026-14506 · Malicious code in dim-svelte-ui (npm)MAL-2026-14511 · Malicious code in svelte-cls-ui (npm)MAL-2026-14513 · Malicious code in typedoc-xyz (npm)MAL-2026-6721 · Malicious code in ts-eslint-helper (npm)MAL-2026-12487 · Malicious code in travel-core-utils-object (npm)MAL-2026-12480 · Malicious code in tms-x-headers (npm)MAL-2026-12283 · Malicious code in tinkoff-ui-angular-addon-wysiwyg (npm)MAL-2026-12281 · Malicious code in tinkoff-terminal-kit-test-commons (npm)MAL-2026-10990 · Malicious code in ts-vitest (npm)MAL-2026-10136 · Malicious code in transform-es2015-sticky-regex (npm)MAL-2026-12278 · Malicious code in tinkoff-statist-browser-typed-client-test.softwarecenter.metrics (npm)MAL-2026-12276 · Malicious code in tinkoff-statist-browser-typed-client-sme.rko.ta.ios.events (npm)MAL-2026-12274 · Malicious code in tinkoff-statist-browser-typed-client-sme.rko.conversionpayments.web (npm)MAL-2026-12273 · Malicious code in tinkoff-statist-browser-typed-client-sme.rko.authorization.common (npm)MAL-2026-12272 · Malicious code in tinkoff-statist-browser-typed-client-sme.platform.web.companyprofile.metrics (npm)MAL-2026-12270 · Malicious code in tinkoff-statist-browser-typed-client-sme.platform.mobile.dynamicteasers.common (npm)MAL-2026-12269 · Malicious code in tinkoff-statist-browser-typed-client-mb.reliability.android.events (npm)MAL-2026-12268 · Malicious code in tinkoff-statist-browser-typed-client-mb.product.tgeofencing (npm)MAL-2026-12266 · Malicious code in tinkoff-statist-browser-typed-client-leasing.admin.events (npm)MAL-2026-12262 · Malicious code in tinkoff-statist-browser-typed-client-investing.product.pulse (npm)MAL-2026-12261 · Malicious code in tinkoff-statist-browser-typed-client-investaccounting.events.templatepage.mainpage (npm)MAL-2026-12260 · Malicious code in tinkoff-statist-browser-typed-client-eventea.projects.smartcam (npm)MAL-2026-12258 · Malicious code in tinkoff-statist-browser-typed-client-dwh.chimera.base (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。