OpenSSF Malicious Packages · OSV format
MAL-2026-15623 · Malicious code in selfsigned-certificate (npm)MAL-2026-15815 · Malicious code in cminhouse-api-gateway-nodejs (npm)MAL-2026-15818 · Malicious code in vitest-cli-pro (npm)MAL-2026-15817 · Malicious code in peertube-plugin-poc-marker (npm)MAL-2026-15811 · Malicious code in syswatch (PyPI)MAL-2026-14389 · Malicious code in envprovision (PyPI)MAL-2026-15809 · Malicious code in tallyboxlite (PyPI)MAL-2026-7447 · Malicious code in zreactjs (npm)MAL-2026-7446 · Malicious code in zircuit-vault (npm)MAL-2026-7445 · Malicious code in zircuit-reporter (npm)MAL-2026-7444 · Malicious code in zircuit-oracle (npm)MAL-2026-7443 · Malicious code in zircuit-keeper (npm)MAL-2026-7442 · Malicious code in yreactjs (npm)MAL-2026-7441 · Malicious code in wreactjs (npm)MAL-2026-7440 · Malicious code in winston-middleware (npm)MAL-2026-7439 · Malicious code in win-env-setup (npm)MAL-2026-7438 · Malicious code in whaleco-assets-json (npm)MAL-2026-7437 · Malicious code in web3-runtime-engine (npm)MAL-2026-7436 · Malicious code in wazirx-localtestnpm (npm)MAL-2026-7435 · Malicious code in wazir-xlocaletstnpm (npm)MAL-2026-7434 · Malicious code in wallarm-design-system (npm)MAL-2026-7433 · Malicious code in vubiquity-website (npm)MAL-2026-7432 · Malicious code in vscode-component-explorer (npm)MAL-2026-7431 · Malicious code in vreactjs (npm)MAL-2026-7430 · Malicious code in ureactjs (npm)MAL-2026-6905 · Malicious code in winston-prism (npm)MAL-2026-6902 · Malicious code in wime-zle (npm)MAL-2026-6896 · Malicious code in ts-eslinter (npm)MAL-2026-6709 · Malicious code in vega-lite-next (npm)MAL-2026-5785 · Malicious code in ve-hemi-rewards (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。