OpenSSF Malicious Packages · OSV format
MAL-2026-15266 · Malicious code in secure-test-browser-1yjarnvk (npm)MAL-2026-15116 · Malicious code in classlink-mwnbufxp (npm)MAL-2026-15085 · Malicious code in classlink-hl9uycka (npm)MAL-2026-15416 · Malicious code in secure-test-browser-r270knja (npm)MAL-2026-14569 · Malicious code in @hd-team/app-dnpkg-beta (npm)MAL-2026-14589 · Malicious code in yamlformat-tools (PyPI)MAL-2026-14590 · Malicious code in yamlformatter-utils (PyPI)MAL-2026-14585 · Malicious code in @znan/wabot (npm)MAL-2026-14578 · Malicious code in pushgitquickx (npm)MAL-2026-14576 · Malicious code in @hd-team/app-impkg-test (npm)MAL-2026-14575 · Malicious code in @hd-team/app-impkg-prod (npm)MAL-2026-14574 · Malicious code in @hd-team/app-dnpkg-three (npm)MAL-2026-14573 · Malicious code in @hd-team/app-dnpkg-test (npm)MAL-2026-14572 · Malicious code in @hd-team/app-dnpkg-ten (npm)MAL-2026-14571 · Malicious code in @hd-team/app-dnpkg-prod (npm)MAL-2026-14570 · Malicious code in @hd-team/app-dnpkg-eight (npm)MAL-2026-14584 · Malicious code in flyteplugins-redis (PyPI)MAL-2026-14583 · Malicious code in flyteplugins-nsight (PyPI)MAL-2026-14581 · Malicious code in flyteplugins-agento11y (PyPI)MAL-2026-14582 · Malicious code in flyteplugins-echo (PyPI)MAL-2026-14579 · Malicious code in svelte-ui-dlx (npm)MAL-2026-5209 · Malicious code in @vapi-ai/server-sdk (npm)MAL-2026-14565 · Malicious code in stackpaths (npm)MAL-2026-14560 · Malicious code in inspectstack (npm)MAL-2026-14558 · Malicious code in deepjoin (npm)MAL-2026-14557 · Malicious code in charclass (npm)MAL-2026-14566 · Malicious code in veloq (npm)MAL-2026-14564 · Malicious code in sigcheck (npm)MAL-2026-14562 · Malicious code in morglog (npm)MAL-2026-14561 · Malicious code in module-relpath (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。