OpenSSF Malicious Packages · OSV format
MAL-2026-17868 · Malicious code in @kre64/hello-npm-test (npm)MAL-2026-17863 · Malicious code in crelic-bqwheel-52f66a3f1d (PyPI)MAL-2026-17765 · Malicious code in @s4yhiitestpoc/r3-https (npm)MAL-2026-17802 · Malicious code in xrp-ledger-utils (RubyGems)MAL-2026-17800 · Malicious code in wallet-hd-derive (RubyGems)MAL-2026-17799 · Malicious code in wallet-balance-scanner (RubyGems)MAL-2026-17798 · Malicious code in tron-trc20-utils (RubyGems)MAL-2026-17797 · Malicious code in ton-jetton-tools (RubyGems)MAL-2026-17796 · Malicious code in staking-apr-fetcher (RubyGems)MAL-2026-17795 · Malicious code in sol-mint-utils (RubyGems)MAL-2026-17794 · Malicious code in seed-phrase-validator (RubyGems)MAL-2026-17793 · Malicious code in perp-funding-rates (RubyGems)MAL-2026-17792 · Malicious code in nft-metadata-resolver (RubyGems)MAL-2026-17789 · Malicious code in hd-wallet-generator (RubyGems)MAL-2026-17788 · Malicious code in gas-refuel-bridge (RubyGems)MAL-2026-17787 · Malicious code in evm-tx-decoder (RubyGems)MAL-2026-17785 · Malicious code in erc20-approve-audit (RubyGems)MAL-2026-17784 · Malicious code in dex-router-abis (RubyGems)MAL-2026-17780 · Malicious code in block-explorer-api (RubyGems)MAL-2026-17749 · Malicious code in @myorder-frontend-commons/analytics (npm)MAL-2026-17862 · Malicious code in fontcase (PyPI)MAL-2026-17860 · Malicious code in opencode2-windows-x64 (npm)MAL-2026-17859 · Malicious code in opencode2-windows-arm64 (npm)MAL-2026-17858 · Malicious code in opencode2-linux-x64-musl (npm)MAL-2026-17855 · Malicious code in opencode2-linux-arm64 (npm)MAL-2026-17854 · Malicious code in opencode2-darwin-x64 (npm)MAL-2026-17852 · Malicious code in opencode2 (npm)MAL-2026-17857 · Malicious code in opencode2-linux-x64 (npm)MAL-2026-17856 · Malicious code in opencode2-linux-arm64-musl (npm)MAL-2026-17853 · Malicious code in opencode2-darwin-arm64 (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。