OpenSSF Malicious Packages · OSV format
MAL-2026-13078 · Malicious code in boxy-rspack-optimize-sharing-runtime (npm)MAL-2026-13090 · Malicious code in boxy-test-host (npm)MAL-2026-13087 · Malicious code in boxy-temper (npm)MAL-2026-13082 · Malicious code in boxy-service (npm)MAL-2026-13088 · Malicious code in boxy-test-block (npm)MAL-2026-13096 · Malicious code in boxy-validate-implicit-deps (npm)MAL-2026-13081 · Malicious code in boxy-semver (npm)MAL-2026-13093 · Malicious code in boxy-tree-providers (npm)MAL-2026-13104 · Malicious code in bpm-foundation-auth (npm)MAL-2026-13086 · Malicious code in boxy-storybook-addon-changelog (npm)MAL-2026-13085 · Malicious code in boxy-story-header (npm)MAL-2026-13095 · Malicious code in boxy-use-what-changed (npm)MAL-2026-13100 · Malicious code in bpm-foundation-ai-assistant (npm)MAL-2026-13105 · Malicious code in bpm-foundation-base-configs (npm)MAL-2026-13102 · Malicious code in bpm-foundation-api (npm)MAL-2026-13094 · Malicious code in boxy-use-calls (npm)MAL-2026-13097 · Malicious code in boxy-webpack-test-utils (npm)MAL-2026-13098 · Malicious code in boxy-wrapper-rspack-plugin (npm)MAL-2026-13101 · Malicious code in bpm-foundation-analytics (npm)MAL-2026-13099 · Malicious code in boxy-wrapper-webpack-plugin (npm)MAL-2026-13106 · Malicious code in bpm-foundation-bundle-optimization (npm)MAL-2026-11155 · Malicious code in xerohub-discord-voice-v3 (npm)MAL-2026-13107 · Malicious code in bpm-foundation-common (npm)MAL-2026-12814 · Malicious code in umber-root (npm)MAL-2026-11192 · Malicious code in test2221 (npm)MAL-2026-12810 · Malicious code in the-search (npm)MAL-2026-12805 · Malicious code in strath (npm)MAL-2026-11147 · Malicious code in simple-probe-utils (npm)MAL-2026-11145 · Malicious code in rollup-runtime-core-polyfills (npm)MAL-2026-12798 · Malicious code in npm-groat (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。