OpenSSF Malicious Packages · OSV format
MAL-2025-6258 · Malicious code in redux-saga-task-cancel-rce (npm)MAL-2025-6257 · Malicious code in redux-saga-channel-end-rce (npm)MAL-2025-6254 · Malicious code in redux-init-rce (npm)MAL-2025-3660 · Malicious code in pie-docs (npm)MAL-2026-3353 · Malicious code in money-badger-open-rpc (npm)MAL-2026-3334 · Malicious code in fanduel (npm)MAL-2025-6284 · Malicious code in events-web (npm)MAL-2025-47122 · Malicious code in hrprce123 (npm)MAL-2025-47121 · Malicious code in hrprce (npm)MAL-2025-47119 · Malicious code in hrp9873 (npm)MAL-2025-4558 · Malicious code in fatfingers-mybigpackage (npm)MAL-2025-4043 · Malicious code in fireblocks-netlink-v2-api-validator (npm)MAL-2025-3132 · Malicious code in internal-utils-bronxi (npm)MAL-2026-2498 · Malicious code in df-sandbox-test (npm)MAL-2025-4554 · Malicious code in cspotcode (npm)MAL-2025-192155 · Malicious code in elf-stats-sparkly-cushion-340 (npm)MAL-2026-6256 · Malicious code in @withgoogle/stitch-sdk (npm)MAL-2026-3724 · Malicious code in @convera/ui-shared (npm)MAL-2026-3028 · Malicious code in amplitude-ma-ts (npm)MAL-2026-2823 · Malicious code in @genoma-ui/components (npm)MAL-2026-2524 · Malicious code in a2a-chat-canvas (npm)MAL-2026-2446 · Malicious code in @corpweb-ui/wmkt-library (npm)MAL-2025-6879 · Malicious code in @yaqiguo/dnstest (npm)MAL-2025-6337 · Malicious code in @xcxcxxx/gsap3 (npm)MAL-2025-5352 · Malicious code in @unkn0wnartist/h1-poc-test (npm)MAL-2025-3138 · Malicious code in angular2-tesla-common (npm)MAL-2024-10227 · Malicious code in @woody-mrs-potato/utils-banking (npm)MAL-2026-13687 · Malicious code in tokocrytodev (npm)MAL-2026-12337 · Malicious code in akamaijs-sensor (npm)MAL-2026-14067 · Malicious code in upload-to-gcp (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。