OpenSSF Malicious Packages · OSV format
MAL-2026-14340 · Malicious code in tinymember (crates.io)MAL-2026-14339 · Malicious code in proc_macro_en (crates.io)MAL-2026-14338 · Malicious code in proc_macro1 (crates.io)MAL-2026-14337 · Malicious code in internment (crates.io)MAL-2026-14336 · Malicious code in arrayref (crates.io)MAL-2026-14335 · Malicious code in aronenao (crates.io)MAL-2026-14334 · Malicious code in arone (crates.io)MAL-2026-14333 · Malicious code in append_only_vec (crates.io)MAL-2026-14332 · Malicious code in aovine (crates.io)MAL-2026-14306 · Malicious code in rc4-secure (PyPI)MAL-2026-14307 · Malicious code in express-route-engine (npm)MAL-2026-14304 · Malicious code in base99-85x (npm)MAL-2026-14303 · Malicious code in x6842179305 (npm)MAL-2026-14314 · Malicious code in webpack-cdn-fetcher (npm)MAL-2026-14312 · Malicious code in griffin-transliterator (npm)MAL-2026-14311 · Malicious code in eslint-config-consumerweb (npm)MAL-2026-14309 · Malicious code in @idanefraim/my-ui-kit (npm)MAL-2026-14299 · Malicious code in gear-composer (npm)MAL-2026-10462 · Malicious code in hehehee (npm)MAL-2026-14296 · Malicious code in gfff5 (npm)MAL-2026-14297 · Malicious code in homekit-mcp (npm)MAL-2026-14292 · Malicious code in log-res (npm)MAL-2026-14291 · Malicious code in libas-signal (npm)MAL-2026-14278 · Malicious code in layer2-sdk (npm)MAL-2026-14293 · Malicious code in matrixflow-js (npm)MAL-2026-14295 · Malicious code in mcp-dev-toolkit (npm)MAL-2026-14283 · Malicious code in neverthrow-core (npm)MAL-2026-14279 · Malicious code in localize-translate (npm)MAL-2026-14282 · Malicious code in mutex-plus (npm)MAL-2026-14281 · Malicious code in mutex-lite (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。