OpenSSF Malicious Packages · OSV format
MAL-2026-13431 · Malicious code in @itsreduxtm/unpkg-xss-test (npm)MAL-2026-13430 · Malicious code in @ch4acko3/frontal-lobe (npm)MAL-2026-13468 · Malicious code in xdaxx (npm)MAL-2026-13470 · Malicious code in ynastore-baileys (npm)MAL-2026-13444 · Malicious code in dpdgroup-css (npm)MAL-2026-13447 · Malicious code in gpt-terminal-cli (npm)MAL-2026-13446 · Malicious code in express-chai (npm)MAL-2026-13433 · Malicious code in @ks-video/kwai-player-web (npm)MAL-2026-13437 · Malicious code in aitable-workflow-server (npm)MAL-2026-13442 · Malicious code in content-common (npm)MAL-2026-13472 · Malicious code in alphalend-abi (PyPI)MAL-2026-13429 · Malicious code in @avi892nash/aegis-grid-runner (npm)MAL-2026-13460 · Malicious code in stretchshop (npm)MAL-2026-13428 · Malicious code in @love-moon/conductor-cli (npm)MAL-2026-13419 · Malicious code in @holocronlab/botruntime-runtime (npm)MAL-2026-13427 · Malicious code in @leejungkiin/awkit (npm)MAL-2026-13474 · Malicious code in @diezyyasha/libsignal-node (npm)MAL-2026-13426 · Malicious code in xayoub-xctxteam (PyPI)MAL-2026-13425 · Malicious code in typst-resume-cli (npm)MAL-2026-10767 · Malicious code in syft-acp-util (npm)MAL-2026-10766 · Malicious code in syft-acp-uikit (npm)MAL-2026-10765 · Malicious code in syft-acp-core (npm)MAL-2026-10764 · Malicious code in syft-acp-atoms (npm)MAL-2026-12402 · Malicious code in new-native-tools-linux-x64-gnu (npm)MAL-2026-13396 · Malicious code in @activepieces/piece-google-forms (npm)MAL-2026-13395 · Malicious code in @activepieces/piece-google-contacts (npm)MAL-2026-13394 · Malicious code in @activepieces/piece-google-bigquery (npm)MAL-2026-13364 · Malicious code in @ikbal_fadilah_vanexa01/vanexa-agent (npm)MAL-2026-13363 · Malicious code in @cliphijack/santaclaude (npm)MAL-2026-13355 · Malicious code in @astralcore/sl-aura (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。