OpenSSF Malicious Packages · OSV format
MAL-2026-15853 · Malicious code in @quantixfinance/supabase (npm)MAL-2026-15848 · Malicious code in @quantixfinance/api (npm)MAL-2026-15886 · Malicious code in guci-wxrout (npm)MAL-2026-15883 · Malicious code in fullcalendar-windos (npm)MAL-2026-15881 · Malicious code in element-icon-guci (npm)MAL-2026-15885 · Malicious code in guci-main (npm)MAL-2026-15884 · Malicious code in guci-date (npm)MAL-2026-15816 · Malicious code in order-package-saas (npm)MAL-2026-15625 · Malicious code in evilpostinstall (npm)MAL-2026-15813 · Malicious code in bt2-api-gateway-node-js (npm)MAL-2026-15599 · Malicious code in verify-contract-viem (npm)MAL-2026-15598 · Malicious code in verify-contract-ethers (npm)MAL-2026-14567 · Malicious code in tailwindcss-3d-animate (npm)MAL-2026-3081 · Malicious code in frank-research-poc-apple (npm)MAL-2026-3080 · Malicious code in frank-bot-gogle-cloning (npm)MAL-2026-15627 · Malicious code in hyperliquid-composer (npm)MAL-2026-15626 · Malicious code in fuels-forc (npm)MAL-2026-15595 · Malicious code in generate-schema-viem (npm)MAL-2026-15594 · Malicious code in generate-schema-ethers (npm)MAL-2026-15593 · Malicious code in fuels-typegen (npm)MAL-2026-15592 · Malicious code in fuels-core (npm)MAL-2026-7012 · Malicious code in express-mongo-limit (npm)MAL-2026-6299 · Malicious code in analysis-chart (npm)MAL-2026-15591 · Malicious code in cre-setup (npm)MAL-2026-15827 · Malicious code in company-sdk (PyPI)MAL-2026-15837 · Malicious code in frank-apple-sync-service (npm)MAL-2026-15834 · Malicious code in apple-internal-test-utility (npm)MAL-2026-15841 · Malicious code in google-cloud-mono-repo-helper (npm)MAL-2026-15840 · Malicious code in google-cloud-internal-core-utils (npm)MAL-2026-15839 · Malicious code in google-cloud-internal-build-helper (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。