OpenSSF Malicious Packages · OSV format
MAL-2026-12417 · Malicious code in post-css-transfer (npm)MAL-2026-13705 · Malicious code in iconova-react (npm)MAL-2026-13724 · Malicious code in kit-map-streak (npm)MAL-2026-13718 · Malicious code in @sqlite-table/sql-creator (npm)MAL-2026-13717 · Malicious code in @sqlite-table/schema-generator (npm)MAL-2026-11154 · Malicious code in xerohub-discord-voice-v2 (npm)MAL-2026-13708 · Malicious code in xerohub-discord-voice (npm)MAL-2026-13691 · Malicious code in @rblxts/services (npm)MAL-2026-13688 · Malicious code in @kuperka/chainguard-sdk (npm)MAL-2026-13706 · Malicious code in neverthrow-js (npm)MAL-2026-13701 · Malicious code in chai-as-format (npm)MAL-2026-13703 · Malicious code in chai-as-promised-plus (npm)MAL-2026-13699 · Malicious code in chai-as-bench (npm)MAL-2026-13702 · Malicious code in chai-as-map (npm)MAL-2026-13679 · Malicious code in svelte-streak-kit (npm)MAL-2026-13678 · Malicious code in svelte-map-visual (npm)MAL-2026-13677 · Malicious code in svelte-kit-cache (npm)MAL-2026-13676 · Malicious code in svelte-cache-kit (npm)MAL-2026-13675 · Malicious code in statist-browser-typed-client-eventea.projects.tdevice (npm)MAL-2026-13674 · Malicious code in statist-browser-typed-client-eventea.projects.tdeal (npm)MAL-2026-13673 · Malicious code in statist-browser-typed-client-eventea.projects.pwakasko (npm)MAL-2026-13672 · Malicious code in statist-browser-typed-client-eventea.projects.pwainsurance (npm)MAL-2026-13671 · Malicious code in statist-browser-typed-client-eventea.projects.pwahelp (npm)MAL-2026-13670 · Malicious code in statist-browser-typed-client-eventea.projects.pwafamily (npm)MAL-2026-13693 · Malicious code in cryptostock (npm)MAL-2026-13495 · Malicious code in blekit (npm)MAL-2026-13668 · Malicious code in @lambda-platform/lambda-vue (npm)MAL-2026-13630 · Malicious code in @rbx-ts/services (npm)MAL-2026-13690 · Malicious code in @noobaihome/amis-uni-area-widget (npm)MAL-2026-13692 · Malicious code in chai-jsonss (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。