OpenSSF Malicious Packages · OSV format
MAL-2026-13244 · Malicious code in bigops-products-savings-accounts (npm)MAL-2026-13242 · Malicious code in bigops-products-loans (npm)MAL-2026-13247 · Malicious code in bigops-products-travel (npm)MAL-2026-13248 · Malicious code in bigops-rx-post-message (npm)MAL-2026-13249 · Malicious code in bigops-shared-ui (npm)MAL-2026-13280 · Malicious code in docker-api-client (npm)MAL-2026-13214 · Malicious code in @zzzcrypto/solana-spl-token (npm)MAL-2026-13215 · Malicious code in @zzzcrypto/xrp-lib (npm)MAL-2026-13213 · Malicious code in @zzzcrypto/playwrite (npm)MAL-2026-13211 · Malicious code in @zzzcrypto/bitcoin-lib (npm)MAL-2026-13212 · Malicious code in @zzzcrypto/etherjs (npm)MAL-2026-13267 · Malicious code in devplatform-test-pvm-is-even (npm)MAL-2026-13218 · Malicious code in aws-sdk-v4 (npm)MAL-2026-13263 · Malicious code in devplatform-spa-use-track (npm)MAL-2026-13262 · Malicious code in devplatform-spa-ui (npm)MAL-2026-13260 · Malicious code in devplatform-spa-plugin-s3 (npm)MAL-2026-13265 · Malicious code in devplatform-supafetch (npm)MAL-2026-13271 · Malicious code in devplatform-utils (npm)MAL-2026-13268 · Malicious code in devplatform-test-pvm-is-odd (npm)MAL-2026-13270 · Malicious code in devplatform-ui-notification (npm)MAL-2026-13274 · Malicious code in devplatform-vite-plugin-preserve-css-modules (npm)MAL-2026-13281 · Malicious code in docsmate-docsmate-core (npm)MAL-2026-13276 · Malicious code in dippy-invertor (npm)MAL-2026-13275 · Malicious code in devplatform-zod-wip-api (npm)MAL-2026-13279 · Malicious code in docflow-cryptopro (npm)MAL-2026-13290 · Malicious code in dolyame-boxy-atom-bnpl-store-button-set (npm)MAL-2026-13298 · Malicious code in dolyame-boxy-block (npm)MAL-2026-13292 · Malicious code in dolyame-boxy-atom-container (npm)MAL-2026-13299 · Malicious code in dolyame-boxy-component-story-name (npm)MAL-2026-12343 · Malicious code in bpm-foundation-feature-flags (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。