OpenSSF Malicious Packages · OSV format
MAL-2026-14308 · Malicious code in libasync (PyPI)MAL-2026-6716 · Malicious code in test-pkg-pnpm (npm)MAL-2026-14313 · Malicious code in node-runtime-utils (npm)MAL-2026-5611 · Malicious code in datetime-toolkit (npm)MAL-2026-14302 · Malicious code in ai-texts-utils (npm)MAL-2026-14217 · Malicious code in ai-texts (npm)MAL-2026-14310 · Malicious code in bunnyhijack-test-0x00 (npm)MAL-2026-6718 · Malicious code in test-pkg-yarn (npm)MAL-2026-6717 · Malicious code in test-pkg-x0 (npm)MAL-2026-6568 · Malicious code in express-mocha-test (npm)MAL-2026-6374 · Malicious code in evil-pkg (npm)MAL-2026-4561 · Malicious code in fe-utils-core (npm)MAL-2026-4556 · Malicious code in express-enrouten-async (npm)MAL-2026-12382 · Malicious code in finance-business-company-id-models (npm)MAL-2026-12380 · Malicious code in fb-forms-form-boilerplate-contacts (npm)MAL-2026-12178 · Malicious code in fb-cards-form-no-resident-information (npm)MAL-2026-10501 · Malicious code in filewisee (npm)MAL-2026-10435 · Malicious code in fetchcraft (npm)MAL-2026-10414 · Malicious code in express-request-engine (npm)MAL-2026-6567 · Malicious code in eslint-commit-parser (npm)MAL-2026-4550 · Malicious code in emojifancy-print (npm)MAL-2026-12784 · Malicious code in devplatform-spa-testing (npm)MAL-2026-12367 · Malicious code in dolyame-ui-form (npm)MAL-2026-12365 · Malicious code in dolyame-boxy-independent-bnpl-info-images (npm)MAL-2026-12364 · Malicious code in dolyame-boxy-atom-bnpl-store-button (npm)MAL-2026-12362 · Malicious code in digital-interview-digital-interview-core (npm)MAL-2026-6540 · Malicious code in db-rake (npm)MAL-2026-6539 · Malicious code in db-query-log (npm)MAL-2026-12747 · Malicious code in devplatform-s3-client (npm)MAL-2026-10631 · Malicious code in core-dotenv (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。