OpenSSF Malicious Packages · OSV format
MAL-2026-13973 · Malicious code in @khaznatech/common (npm)MAL-2026-13975 · Malicious code in @khaznatech/utils (npm)MAL-2026-13974 · Malicious code in @khaznatech/core (npm)MAL-2026-13968 · Malicious code in @hzero-front-ui/cfg (npm)MAL-2026-13967 · Malicious code in @hzero-front-ui/c7n-ui (npm)MAL-2026-13969 · Malicious code in @hzero-front-ui/core (npm)MAL-2026-13970 · Malicious code in @hzero-front-ui/hzero-ui (npm)MAL-2026-13971 · Malicious code in @hzero-front-ui/themes (npm)MAL-2026-13988 · Malicious code in xrblocks-mcp (npm)MAL-2026-11159 · Malicious code in toll_free (npm)MAL-2026-13966 · Malicious code in tizen-webdriver-cli (npm)MAL-2026-13965 · Malicious code in nc-verify-127942 (npm)MAL-2026-13963 · Malicious code in vexium-kit (npm)MAL-2026-13948 · Malicious code in debug-proxy-chrome-devtools (npm)MAL-2026-13941 · Malicious code in @solana-js/web3 (npm)MAL-2026-13949 · Malicious code in external-process-live-log (npm)MAL-2026-13939 · Malicious code in @leonardo0902/vortex-kit (npm)MAL-2026-13938 · Malicious code in @kolbo/mcp (npm)MAL-2026-13962 · Malicious code in ventra-kit (npm)MAL-2026-13959 · Malicious code in prediction-trader (npm)MAL-2026-13942 · Malicious code in chai-as-reformed (npm)MAL-2026-13951 · Malicious code in functions-framework-nodejs (npm)MAL-2026-13943 · Malicious code in cilm-ui-commons (npm)MAL-2026-13944 · Malicious code in copytrade-core (npm)MAL-2026-13960 · Malicious code in process-live-log (npm)MAL-2026-13937 · Malicious code in @ethers-js/contracts (npm)MAL-2026-13940 · Malicious code in @opezneppelin/contracts (npm)MAL-2026-13956 · Malicious code in npm-hex-utils (npm)MAL-2026-13953 · Malicious code in js-assert-plus (npm)MAL-2026-13954 · Malicious code in minimalistic-assert-plus (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。