OpenSSF Malicious Packages · OSV format
MAL-2026-11071 · Malicious code in whs4_eud (npm)MAL-2026-11070 · Malicious code in whs4_deu (npm)MAL-2026-13743 · Malicious code in whs4_ued (npm)MAL-2026-13742 · Malicious code in zeal-rq-hooks (npm)MAL-2026-13694 · Malicious code in env-local (npm)MAL-2026-13736 · Malicious code in @nzeros/codebreak (npm)MAL-2026-13741 · Malicious code in safe-local-env-loader (npm)MAL-2026-13711 · Malicious code in plp-contract (PyPI)MAL-2026-13710 · Malicious code in neutrl-core (PyPI)MAL-2026-13709 · Malicious code in neutrl-contracts (PyPI)MAL-2026-13712 · Malicious code in bigtime (PyPI)MAL-2026-13686 · Malicious code in chaintest (PyPI)MAL-2026-6477 · Malicious code in runtimekit (npm)MAL-2026-13727 · Malicious code in tailwind-elements-ui (npm)MAL-2026-13726 · Malicious code in svelte-kit-streak (npm)MAL-2026-13725 · Malicious code in spoint (npm)MAL-2026-13518 · Malicious code in postcss-theme-provider (npm)MAL-2026-13733 · Malicious code in newtun (npm)MAL-2026-13723 · Malicious code in godot-kit (npm)MAL-2026-13722 · Malicious code in fsbrowse (npm)MAL-2026-13721 · Malicious code in eth-library-utils (npm)MAL-2026-13720 · Malicious code in eth-library-toolkit (npm)MAL-2026-13719 · Malicious code in commonjs-assertion (npm)MAL-2026-10676 · Malicious code in commonjs-assert (npm)MAL-2026-13716 · Malicious code in @sqlite-prime/nodesql (npm)MAL-2026-13715 · Malicious code in @sqlite-prime/createsql (npm)MAL-2026-13714 · Malicious code in @sqlite-labs/nodesql (npm)MAL-2026-13713 · Malicious code in @sqlite-labs/createsql (npm)MAL-2026-13695 · Malicious code in hex-encode-utils (npm)MAL-2026-13696 · Malicious code in postcss-initial-provider (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。