OpenSSF Malicious Packages · OSV format
MAL-2026-14418 · Malicious code in dotish (npm)MAL-2026-14411 · Malicious code in dpg-media-7ehemel (npm)MAL-2026-14416 · Malicious code in dims-hydration-ui (npm)MAL-2026-14425 · Malicious code in auth-otp (npm)MAL-2026-14410 · Malicious code in @temptation.js/utils (npm)MAL-2026-14404 · Malicious code in @blurrydespair/libsignal-node (npm)MAL-2026-14427 · Malicious code in chai-as-mno (npm)MAL-2026-14428 · Malicious code in consumerweb-serverutils (npm)MAL-2026-14436 · Malicious code in poly-price-node (npm)MAL-2026-14439 · Malicious code in secret-key-totp (npm)MAL-2026-14435 · Malicious code in paypal-business-sdk (npm)MAL-2026-14433 · Malicious code in manticore-log (npm)MAL-2026-14437 · Malicious code in ppb-manticore (npm)MAL-2026-15686 · Malicious code in @yuva2210/htx-poc-skills-rce (npm)MAL-2026-15685 · Malicious code in @x-team/strapi (npm)MAL-2026-5574 · Malicious code in spotify-url-resolver (npm)MAL-2026-14400 · Malicious code in sm-session (npm)MAL-2026-14399 · Malicious code in sm-payment (npm)MAL-2026-14398 · Malicious code in sm-oauth (npm)MAL-2026-14397 · Malicious code in sm-checkout (npm)MAL-2026-14396 · Malicious code in sm-cart (npm)MAL-2026-14395 · Malicious code in sm-billing-form (npm)MAL-2026-14394 · Malicious code in sm-apikey-model (npm)MAL-2026-14393 · Malicious code in sm-admin (npm)MAL-2026-12073 · Malicious code in sso-tramvai-module-context-auth (npm)MAL-2026-12730 · Malicious code in devplatform-nx-ts (npm)MAL-2026-15684 · Malicious code in @pimy-b2cweb/common (npm)MAL-2026-15683 · Malicious code in @pimy-b2cweb/apiclient-common (npm)MAL-2026-15682 · Malicious code in @ice-trade-components/common (npm)MAL-2026-15680 · Malicious code in @cawraytestorg/packagetest2 (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。