OpenSSF Malicious Packages · OSV format
MAL-2026-16287 · Malicious code in openmct-heatmap (npm)MAL-2026-16283 · Malicious code in @shared-web/assets (npm)MAL-2026-16279 · Malicious code in xzvbailsx (npm)MAL-2026-16278 · Malicious code in xzvbailey (npm)MAL-2026-16277 · Malicious code in xa424234657567 (npm)MAL-2026-10041 · Malicious code in chai-as-buffered (npm)MAL-2026-16253 · Malicious code in laycot (npm)MAL-2026-16269 · Malicious code in requests-asetwe (PyPI)MAL-2026-16274 · Malicious code in requests-auroras (PyPI)MAL-2026-16273 · Malicious code in blue-string-formatter-utils (npm)MAL-2026-16270 · Malicious code in @tink/tink-link-core (npm)MAL-2026-16271 · Malicious code in test89078-auth (npm)MAL-2026-16275 · Malicious code in requests-triwes (PyPI)MAL-2026-16272 · Malicious code in kartykgithub-multiversion-a (npm)MAL-2026-16266 · Malicious code in @kartyk-github-org/takedown-b (npm)MAL-2026-16265 · Malicious code in @kartyk-github-org/takedown-a (npm)MAL-2026-16262 · Malicious code in tailwindcss-form-ui (npm)MAL-2026-16261 · Malicious code in @railone/image-utils (npm)MAL-2022-250 · Malicious code in @epic-mod-market/ui (npm)MAL-2026-16248 · Malicious code in kartykgithub-takedown-a (npm)MAL-2026-16151 · Malicious code in sql-limit-enforcer (npm)MAL-2026-16260 · Malicious code in confx1789550882 (npm)MAL-2026-16062 · Malicious code in @yongot/canary-mcp-test (npm)MAL-2026-16259 · Malicious code in randompkge (npm)MAL-2026-16258 · Malicious code in randompkgd (npm)MAL-2026-16257 · Malicious code in randompkgc (npm)MAL-2026-16250 · Malicious code in marketing-mcp (PyPI)MAL-2026-16242 · Malicious code in trongappy (PyPI)MAL-2026-16241 · Malicious code in rak-lab-yoav-orca-zrktd2cp5hjmo4x7 (PyPI)MAL-2026-16240 · Malicious code in praetorian-mind-rce-test-2026 (PyPI)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。