OpenSSF Malicious Packages · OSV format
MAL-2026-14350 · Malicious code in scrambleeer (PyPI)MAL-2026-14358 · Malicious code in scrambleeeer (PyPI)MAL-2026-6372 · Malicious code in rollup-runtime-polyfill-core (npm)MAL-2026-14378 · Malicious code in stillm4ddpocs-rtest-bravo (npm)MAL-2026-14377 · Malicious code in stillm4ddpocs-rtest-alpha (npm)MAL-2026-14361 · Malicious code in stillm4ddpocs-demo-gadget (npm)MAL-2026-14352 · Malicious code in tailwind-animate-css-plugin (npm)MAL-2026-12418 · Malicious code in postcss-animate-css-vars (npm)MAL-2026-10516 · Malicious code in polymarket-bot-logger (npm)MAL-2026-14359 · Malicious code in internallib_v902 (npm)MAL-2026-14357 · Malicious code in @postman-cse/okta-aio-linux-arm64 (npm)MAL-2026-14366 · Malicious code in 8-fetchsight-web (npm)MAL-2026-14365 · Malicious code in 6-viewsight-web (npm)MAL-2026-14364 · Malicious code in 3-buildsight-web (npm)MAL-2026-14363 · Malicious code in 2-loadsight-web (npm)MAL-2026-14362 · Malicious code in 10-shardsight-web (npm)MAL-2026-14372 · Malicious code in create-coin (npm)MAL-2026-14374 · Malicious code in rust-testing-utils (npm)MAL-2026-14375 · Malicious code in solidity-testing-utils (npm)MAL-2026-14373 · Malicious code in hatdhat-testkit (npm)MAL-2026-14376 · Malicious code in stillm4ddpocs-demo-sprocket (npm)MAL-2026-14580 · Malicious code in @postman-cse/okta-aio-darwin-arm64 (npm)MAL-2026-14360 · Malicious code in stillm4ddpocs-demo-widget (npm)MAL-2026-14354 · Malicious code in kelly-sizing (npm)MAL-2026-14356 · Malicious code in lumen-pages-community (npm)MAL-2026-14355 · Malicious code in fuel-react (npm)MAL-2026-6714 · Malicious code in polymarket-trading-developer-tool (npm)MAL-2026-14351 · Malicious code in requests-crypt (PyPI)MAL-2026-14349 · Malicious code in boto4 (PyPI)MAL-2026-12434 · Malicious code in saas-f-testing (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。