OpenSSF Malicious Packages · OSV format
MAL-2026-10471 · Malicious code in loading-sessions (npm)MAL-2026-10331 · Malicious code in kirkland (npm)MAL-2026-10205 · Malicious code in library-explorer (npm)MAL-2026-10146 · Malicious code in ng-search-api (npm)MAL-2026-10145 · Malicious code in motiondnb (npm)MAL-2026-10144 · Malicious code in mdb-vite (npm)MAL-2026-7306 · Malicious code in jwt-path (npm)MAL-2026-7305 · Malicious code in jreactjs (npm)MAL-2026-7304 · Malicious code in ixpresso-core (npm)MAL-2026-7303 · Malicious code in ireactjs (npm)MAL-2026-7302 · Malicious code in insomnia-plugin-poctest-null0001 (npm)MAL-2026-7301 · Malicious code in ingularjs (npm)MAL-2026-7300 · Malicious code in ict-ui-carbon (npm)MAL-2026-7299 · Malicious code in ict-api-foundations (npm)MAL-2026-7298 · Malicious code in icons.generated (npm)MAL-2026-7297 · Malicious code in ibotta-ts (npm)MAL-2026-7296 · Malicious code in iam-scripts (npm)MAL-2026-7295 · Malicious code in hreactjs (npm)MAL-2026-7294 · Malicious code in google-tag-manager-integration-sample (npm)MAL-2026-7293 · Malicious code in gontawesome (npm)MAL-2026-7292 · Malicious code in gitpath-package (npm)MAL-2026-7291 · Malicious code in generate-iam-token (npm)MAL-2026-6841 · Malicious code in jsonupper (npm)MAL-2026-6394 · Malicious code in hs-locale-management (npm)MAL-2026-6370 · Malicious code in hyperpure (npm)MAL-2026-5827 · Malicious code in index-ulid (npm)MAL-2026-5779 · Malicious code in hemi-supply-cron (npm)MAL-2026-5778 · Malicious code in hemi-earn-actions (npm)MAL-2026-5612 · Malicious code in gpt-sdk (npm)MAL-2026-5473 · Malicious code in gethandler-api (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。