OpenSSF Malicious Packages · OSV format
MAL-2026-12429 · Malicious code in rollup-plugins-check (npm)MAL-2026-10989 · Malicious code in react-tabulix-virtual (npm)MAL-2026-11142 · Malicious code in node-array-plus (npm)MAL-2026-12182 · Malicious code in json-validator-utils (npm)MAL-2026-11020 · Malicious code in hardhat-gas-tracker (npm)MAL-2026-12176 · Malicious code in dateuuidv2 (npm)MAL-2026-12349 · Malicious code in chai-assertions-plus (npm)MAL-2026-11995 · Malicious code in approval-guardian (npm)MAL-2026-12336 · Malicious code in afisha-storybook-default (npm)MAL-2026-12316 · Malicious code in @cryptosrvc/shift-exchange-root (npm)MAL-2026-11121 · Malicious code in @apexfnd/apex (npm)MAL-2026-11120 · Malicious code in @ai_/autoprefixers (npm)MAL-2026-12804 · Malicious code in store-locator-widget (npm)MAL-2026-12508 · Malicious code in @shiftmarkets/no-brainer-sdk (npm)MAL-2026-12512 · Malicious code in appsignal (npm)MAL-2026-12484 · Malicious code in trailserver (npm)MAL-2026-12397 · Malicious code in luluking (npm)MAL-2026-12325 · Malicious code in @nextco/utils (npm)MAL-2026-12491 · Malicious code in uploader-frontend (npm)MAL-2026-12492 · Malicious code in uploader-frontend-legacy (npm)MAL-2026-12395 · Malicious code in jquery.ui.tabs (npm)MAL-2026-12403 · Malicious code in node-cache-multithread (npm)MAL-2026-12394 · Malicious code in jquery.ui.core (npm)MAL-2026-12319 · Malicious code in @kite-js-tools/core (npm)MAL-2026-12321 · Malicious code in @mgor/fw-canary-20260725-394b024b (npm)MAL-2026-12329 · Malicious code in @shiftmarkets/shift-sdk-v4 (npm)MAL-2026-12419 · Malicious code in pp-react-worldready-v5 (npm)MAL-2026-12399 · Malicious code in luluking3 (npm)MAL-2026-12398 · Malicious code in luluking2 (npm)MAL-2026-12315 · Malicious code in @cryptosrvc/no-brainer-sdk (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。