OpenSSF Malicious Packages · OSV format
MAL-2026-13389 · Malicious code in @voxepay/checkout (npm)MAL-2026-10723 · Malicious code in @yeaft/webchat-agent (npm)MAL-2026-13388 · Malicious code in @simplipayng/checkout (npm)MAL-2026-12312 · Malicious code in @agenthub-ai/agent (npm)MAL-2026-13421 · Malicious code in @trackunit/iris-app-sdk-vite (npm)MAL-2026-13405 · Malicious code in vitest-preview-pro-all (npm)MAL-2026-13399 · Malicious code in agenthub-multiagent-mcp (npm)MAL-2026-13401 · Malicious code in helmet-pro (npm)MAL-2026-13393 · Malicious code in wallet-monitor-snap (npm)MAL-2026-10721 · Malicious code in @whalent/agent (npm)MAL-2026-12437 · Malicious code in simplipayng (npm)MAL-2026-12333 · Malicious code in @zahlen/checkout-react (npm)MAL-2026-12332 · Malicious code in @zahlen/checkout-angular (npm)MAL-2026-12330 · Malicious code in @vboxdev/common (npm)MAL-2026-12328 · Malicious code in @rentwise/common (npm)MAL-2026-12324 · Malicious code in @nasdtickets/common (npm)MAL-2026-12323 · Malicious code in @nasddatax/common (npm)MAL-2026-12318 · Malicious code in @hoteldev/common (npm)MAL-2026-13387 · Malicious code in @afasinatickets/common (npm)MAL-2026-11128 · Malicious code in app-soda-layer (npm)MAL-2026-13379 · Malicious code in statist-browser-typed-client-sme.rko.tariffs.web (npm)MAL-2026-12812 · Malicious code in ts-toolkit-plus (npm)MAL-2026-12499 · Malicious code in wallet-analytics (npm)MAL-2026-12493 · Malicious code in utility-kit-ts (npm)MAL-2026-12486 · Malicious code in travel-core-typings-reducers (npm)MAL-2026-12485 · Malicious code in trapp-configuration (npm)MAL-2026-12477 · Malicious code in tcb-web-images (npm)MAL-2026-12476 · Malicious code in tcb-web-header (npm)MAL-2026-12454 · Malicious code in statist-browser-typed-client-social.shorts.editor (npm)MAL-2026-12453 · Malicious code in statist-browser-typed-client-sme.rko.finance.web (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。