OpenSSF Malicious Packages · OSV format
MAL-2026-18276 · Malicious code in @drone-js-ext/core (npm)MAL-2026-18275 · Malicious code in @ppa-web-components/ppa-hotel-collection (npm)MAL-2026-18274 · Malicious code in @ppa-web-components/ppa-headerfooter (npm)MAL-2026-18252 · Malicious code in @eforms/forms-api (npm)MAL-2026-18247 · Malicious code in @liauto/win32-x64 (npm)MAL-2026-18245 · Malicious code in @k18k/entrypoint-sdk-linux-x64 (npm)MAL-2026-18244 · Malicious code in @k18k/entrypoint-sdk-darwin-x64 (npm)MAL-2026-18243 · Malicious code in @k18k/entrypoint-sdk-darwin-arm64 (npm)MAL-2026-18205 · Malicious code in @tekmidian/pai (npm)MAL-2026-18200 · Malicious code in @seggy116/next-diff (npm)MAL-2026-18199 · Malicious code in @pkgship/frps-linux-amd64 (npm)MAL-2026-18198 · Malicious code in @pkgship/frpc-linux-amd64 (npm)MAL-2026-18194 · Malicious code in @lumen-labs-dev/whisper-node (npm)MAL-2026-18191 · Malicious code in @pkgship/frpc-darwin-amd64 (npm)MAL-2026-18190 · Malicious code in @liauto/darwin-x64 (npm)MAL-2026-18125 · Malicious code in @worrisome/aaaa (npm)MAL-2026-18074 · Malicious code in animatecss-tailwind-vectrix (npm)MAL-2026-18073 · Malicious code in animatecss-tailwind-presets (npm)MAL-2026-18072 · Malicious code in animatecss-tailwind-plugin (npm)MAL-2026-18070 · Malicious code in animatecss-tailwind-helper (npm)MAL-2026-18055 · Malicious code in api-anthropic (npm)MAL-2026-17922 · Malicious code in @pkgship/frpc-linux-arm64 (npm)MAL-2026-17846 · Malicious code in @yudzxml/baileys (npm)MAL-2026-15604 · Malicious code in @worrisome/reutil (npm)MAL-2026-13931 · Malicious code in @dreamguyxeon/libsignal-node (npm)MAL-2026-12108 · Malicious code in alipclutch-baileys (npm)MAL-2025-47009 · Malicious code in @magda/semantic-indexer-sdk (npm)MAL-2026-2967 · Malicious code in 6161test1234 (npm)MAL-2026-18337 · Malicious code in @camera.ui/camera-ui-nvr-windows-amd64 (npm)MAL-2026-18295 · Malicious code in @capsense/core-ui (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。