OpenSSF Malicious Packages · OSV format
MAL-2026-10470 · Malicious code in @uw010010/vite-tree (npm)MAL-2026-10405 · Malicious code in @torbeck/heap (npm)MAL-2026-5835 · Malicious code in lab-helper (npm)MAL-2026-14036 · Malicious code in notafollower1226 (npm)MAL-2026-14035 · Malicious code in notafollower122 (npm)MAL-2026-14034 · Malicious code in notafollower1 (npm)MAL-2026-14019 · Malicious code in fr-ito-web-react (npm)MAL-2026-13879 · Malicious code in dakumangalsingh (npm)MAL-2026-14031 · Malicious code in datefmt-core-utils (npm)MAL-2026-14032 · Malicious code in datefmt-simple-utils (npm)MAL-2026-14037 · Malicious code in tailwind-plugin-kit (npm)MAL-2026-14038 · Malicious code in tailwind-toolkit (npm)MAL-2026-14030 · Malicious code in bootstrap-custom-ui (npm)MAL-2026-14075 · Malicious code in ak-mal-test-poc (npm)MAL-2026-14091 · Malicious code in pocbitbarrontest (npm)MAL-2026-14074 · Malicious code in @vyzensockets/baileys (npm)MAL-2026-14085 · Malicious code in hrp9872 (npm)MAL-2026-14084 · Malicious code in hrp9871 (npm)MAL-2026-14090 · Malicious code in npm_pkg_1094 (npm)MAL-2026-14089 · Malicious code in npm_pkg_1093 (npm)MAL-2026-14097 · Malicious code in thepackagethatworks_ (npm)MAL-2026-14088 · Malicious code in nolimitcity (npm)MAL-2026-13964 · Malicious code in bs58-15 (npm)MAL-2026-14016 · Malicious code in preinstall-hook-webhook-callback-demo (npm)MAL-2026-13744 · Malicious code in @dgn-src-click-to-pay-org/srcdcfreleasecert (npm)MAL-2026-5166 · Malicious code in sourceflow-tracker (npm)MAL-2026-10443 · Malicious code in home-sections-web-ui (npm)MAL-2026-6565 · Malicious code in @uisp/utils (npm)MAL-2026-6312 · Malicious code in @tinyfox/shapecheck (npm)MAL-2026-6311 · Malicious code in @thymelab/logfx (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。