OpenSSF Malicious Packages · OSV format
MAL-2026-12303 · Malicious code in twork-mf-e2e-nitro (npm)MAL-2026-12302 · Malicious code in twork-data-services-sme-operations-authorizations (npm)MAL-2026-12300 · Malicious code in twork-data-services-role-app (npm)MAL-2026-12299 · Malicious code in twork-data-services-proxy-prime-api-v1-account-overdraft-info (npm)MAL-2026-12298 · Malicious code in twork-data-services-proxy-invest-symbols-list (npm)MAL-2026-12295 · Malicious code in twork-data-services-procedure-engine-api-v1-procedure-info (npm)MAL-2026-12293 · Malicious code in twork-data-services-invest-box-account (npm)MAL-2026-12292 · Malicious code in twork-data-services-getting-arrests (npm)MAL-2026-12291 · Malicious code in twork-data-services-eacq-company-service-v2-api-v1-identifiers-crm (npm)MAL-2026-12290 · Malicious code in twork-data-services-customer-api-v2-customer-vip-status (npm)MAL-2026-12289 · Malicious code in twork-data-services-counterfree (npm)MAL-2026-12288 · Malicious code in twork-data-services-aggregator-sme-task-info (npm)MAL-2026-12287 · Malicious code in twork-data-services-aggregator-company-sme-main-timeline-loader-with-customers (npm)MAL-2026-11550 · Malicious code in twork-data-services-aggregator-api-v2-data-view-company-company-profile-mf-data-transformer (npm)MAL-2026-14489 · Malicious code in hydration-cls-ui (npm)MAL-2026-14429 · Malicious code in dim-hydration-ui (npm)MAL-2026-14515 · Malicious code in wm-lib-env-provider (npm)MAL-2026-14514 · Malicious code in wm-eslint-fe (npm)MAL-2026-12487 · Malicious code in travel-core-utils-object (npm)MAL-2026-12480 · Malicious code in tms-x-headers (npm)MAL-2026-12283 · Malicious code in tinkoff-ui-angular-addon-wysiwyg (npm)MAL-2026-12281 · Malicious code in tinkoff-terminal-kit-test-commons (npm)MAL-2026-10990 · Malicious code in ts-vitest (npm)MAL-2026-10136 · Malicious code in transform-es2015-sticky-regex (npm)MAL-2026-12278 · Malicious code in tinkoff-statist-browser-typed-client-test.softwarecenter.metrics (npm)MAL-2026-12276 · Malicious code in tinkoff-statist-browser-typed-client-sme.rko.ta.ios.events (npm)MAL-2026-12274 · Malicious code in tinkoff-statist-browser-typed-client-sme.rko.conversionpayments.web (npm)MAL-2026-12273 · Malicious code in tinkoff-statist-browser-typed-client-sme.rko.authorization.common (npm)MAL-2026-12272 · Malicious code in tinkoff-statist-browser-typed-client-sme.platform.web.companyprofile.metrics (npm)MAL-2026-12270 · Malicious code in tinkoff-statist-browser-typed-client-sme.platform.mobile.dynamicteasers.common (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。