OpenSSF Malicious Packages · OSV format
MAL-2026-12358 · Malicious code in croft-node (npm)MAL-2026-10586 · Malicious code in crypto-validate-lib (npm)MAL-2026-14251 · Malicious code in ngsw-config (npm)MAL-2026-14248 · Malicious code in nice-utils-helper (npm)MAL-2026-14243 · Malicious code in flydev (npm)MAL-2026-14241 · Malicious code in dxrs-dos (npm)MAL-2026-14240 · Malicious code in dxr-dos (npm)MAL-2026-14247 · Malicious code in magika-js (npm)MAL-2026-14245 · Malicious code in github-policy-bot (npm)MAL-2026-14225 · Malicious code in ambera (npm)MAL-2026-14244 · Malicious code in gemini-cli-a2a-server (npm)MAL-2026-14239 · Malicious code in gaarf-node-bq (npm)MAL-2026-14238 · Malicious code in gaarf-node (npm)MAL-2026-14237 · Malicious code in gaarf-bq (npm)MAL-2026-14236 · Malicious code in gaarf (npm)MAL-2026-14235 · Malicious code in config-helper-kit (npm)MAL-2026-14234 · Malicious code in commandor-lib (npm)MAL-2026-14233 · Malicious code in code-assist-mcp (npm)MAL-2026-14232 · Malicious code in chromeos-webdriver-cli (npm)MAL-2026-14231 · Malicious code in chromecast-webdriver-cli (npm)MAL-2026-14230 · Malicious code in chrome-enterprise-premium-mcp (npm)MAL-2026-14229 · Malicious code in carbon-monorepo (npm)MAL-2026-14228 · Malicious code in broadcast-graphics-mcp (npm)MAL-2026-14227 · Malicious code in bazelisk (npm)MAL-2026-14226 · Malicious code in animate-css-vite (npm)MAL-2026-14218 · Malicious code in mapkit-loader (npm)MAL-2026-14219 · Malicious code in setup-codex (npm)MAL-2026-14220 · Malicious code in solidity-hold (npm)MAL-2026-14221 · Malicious code in ssb-test-package (npm)MAL-2026-14222 · Malicious code in streak-cal-core (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。