OpenSSF Malicious Packages · OSV format
MAL-2026-12713 · Malicious code in devplatform-humanize-network-error (npm)MAL-2026-12712 · Malicious code in devplatform-http-client (npm)MAL-2026-12702 · Malicious code in devplatform-cli-plugin-lint (npm)MAL-2026-12698 · Malicious code in devplatform-auth-client (npm)MAL-2026-12695 · Malicious code in devplatform-api-v2-resource-mock (npm)MAL-2026-12687 · Malicious code in delivery-ci-upgrade-from (npm)MAL-2026-12685 · Malicious code in delivery-ci-update-gitlab (npm)MAL-2026-12681 · Malicious code in delivery-ci-storybook (npm)MAL-2026-12680 · Malicious code in delivery-ci-sage (npm)MAL-2026-12666 · Malicious code in crypto-checkout-api (npm)MAL-2026-12513 · Malicious code in async-mutex-lock (npm)MAL-2026-12361 · Malicious code in deposits-overnight (npm)MAL-2026-12346 · Malicious code in cardsmobile-collection (npm)MAL-2026-12342 · Malicious code in boxy-fixture-allure (npm)MAL-2026-12172 · Malicious code in bigops-voximplant (npm)MAL-2026-12149 · Malicious code in bigops-auth (npm)MAL-2026-12148 · Malicious code in bigops-api-mobile (npm)MAL-2026-12146 · Malicious code in beaver-ui-hooks (npm)MAL-2026-12145 · Malicious code in beaver-ui-form-object (npm)MAL-2026-10722 · Malicious code in @whalent/agent-core (npm)MAL-2026-13372 · Malicious code in eth-account-wallet (PyPI)MAL-2026-13376 · Malicious code in claude-remote-agent (npm)MAL-2026-12839 · Malicious code in bigops-tcrm-permissions (npm)MAL-2026-13374 · Malicious code in @chnayser/server (npm)MAL-2026-13377 · Malicious code in ezdiscordbots (npm)MAL-2026-13378 · Malicious code in npm-dc-dev (npm)MAL-2026-13375 · Malicious code in app-api-sdk (npm)MAL-2026-13361 · Malicious code in defi-sdk-py (PyPI)MAL-2026-13371 · Malicious code in multi-acct (npm)MAL-2026-13368 · Malicious code in express-dever (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。