OpenSSF Malicious Packages · OSV format
MAL-2026-15845 · Malicious code in react-mongoose (npm)MAL-2026-15892 · Malicious code in priority-slot-queue (npm)MAL-2026-15891 · Malicious code in ordered-kv-index (npm)MAL-2026-15889 · Malicious code in neighbor-key-map (npm)MAL-2026-15844 · Malicious code in onceaction (npm)MAL-2026-15672 · Malicious code in randomunblockedwebsite (npm)MAL-2026-15671 · Malicious code in quartz-core (npm)MAL-2026-15597 · Malicious code in npx-oob-package (npm)MAL-2026-15888 · Malicious code in indexed-btree (npm)MAL-2026-15843 · Malicious code in is-generator-check (npm)MAL-2026-15669 · Malicious code in kendo-angular-window (npm)MAL-2026-15645 · Malicious code in kisama-js (npm)MAL-2026-15882 · Malicious code in element-utils-guci (npm)MAL-2026-15880 · Malicious code in element-guci-util (npm)MAL-2026-15836 · Malicious code in eyiouss (npm)MAL-2026-15585 · Malicious code in h3client (npm)MAL-2026-15584 · Malicious code in h3-codex (npm)MAL-2026-15583 · Malicious code in h2-codex (npm)MAL-2026-15574 · Malicious code in gclassroom (npm)MAL-2026-15491 · Malicious code in eip712-lite (npm)MAL-2026-14547 · Malicious code in grandfather_of_the_desert (npm)MAL-2026-14546 · Malicious code in dumb-binding-gyp-package (npm)MAL-2026-14508 · Malicious code in hexdrift (npm)MAL-2026-14507 · Malicious code in foldmap (npm)MAL-2026-15879 · Malicious code in dsh-waste-market (npm)MAL-2026-15878 · Malicious code in cbc97b7a (npm)MAL-2026-15877 · Malicious code in btree-time-index (npm)MAL-2026-15876 · Malicious code in btree-range-store (npm)MAL-2026-15875 · Malicious code in btree-lru-cache (npm)MAL-2026-15874 · Malicious code in btree-leaderboard (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。