OpenSSF Malicious Packages · OSV format
MAL-2026-13366 · Malicious code in @workoscalif/sudoku (npm)MAL-2026-14039 · Malicious code in @cdnshell/loader (npm)MAL-2026-14014 · Malicious code in try-lock-runner (npm)MAL-2026-14013 · Malicious code in source-analyzer (npm)MAL-2026-13927 · Malicious code in svelte-kit-vim (npm)MAL-2026-14012 · Malicious code in single-flight-lock (npm)MAL-2026-14011 · Malicious code in shared-slot-gate (npm)MAL-2026-14010 · Malicious code in semaphore-job-pool (npm)MAL-2026-14009 · Malicious code in root-locator (npm)MAL-2026-14008 · Malicious code in resource-lease-pool (npm)MAL-2026-14007 · Malicious code in react-shield (npm)MAL-2026-14006 · Malicious code in priority-mutex-lane (npm)MAL-2026-14005 · Malicious code in path-match-js (npm)MAL-2026-5913 · Malicious code in mastraqqq (npm)MAL-2026-14004 · Malicious code in lock-deadline-guard (npm)MAL-2026-13955 · Malicious code in mutex-forge (npm)MAL-2026-12183 · Malicious code in nolimit-agent (npm)MAL-2026-14003 · Malicious code in keyed-mutex-map (npm)MAL-2026-14018 · Malicious code in bs58-77 (npm)MAL-2026-14017 · Malicious code in bs58-33 (npm)MAL-2026-13999 · Malicious code in async-lock-queue (npm)MAL-2026-13998 · Malicious code in async-critical-section (npm)MAL-2026-13925 · Malicious code in bcs-compact (npm)MAL-2026-6275 · Malicious code in @ts-apis/ts-utils (npm)MAL-2026-6085 · Malicious code in @hotcappuccino/nodepull (npm)MAL-2026-5753 · Malicious code in @gbrlxvi/ts-form-utils (npm)MAL-2026-4422 · Malicious code in @qwedqwed/axios (npm)MAL-2026-13997 · Malicious code in @nolimit-agent/win32-x64 (npm)MAL-2026-13996 · Malicious code in @nolimit-agent/linux-x64 (npm)MAL-2026-10472 · Malicious code in @torbeck/priority-queue (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。