OpenSSF Malicious Packages · OSV format
MAL-2026-12317 · Malicious code in @cryptosrvc/shift-sdk-v4 (npm)MAL-2026-12427 · Malicious code in remote_session_elements (npm)MAL-2026-12431 · Malicious code in rpc-endpoint-rotator (npm)MAL-2026-12371 · Malicious code in eth-codegen (npm)MAL-2026-12498 · Malicious code in wagmi-react (npm)MAL-2026-12357 · Malicious code in cors-security (npm)MAL-2026-12436 · Malicious code in shift-sdk-v5 (npm)MAL-2026-12388 · Malicious code in gekko-trading-bot (npm)MAL-2026-12376 · Malicious code in express-middle (npm)MAL-2026-12344 · Malicious code in caldora (npm)MAL-2026-12503 · Malicious code in numpyp (PyPI)MAL-2026-12457 · Malicious code in streak-bucket-core (npm)MAL-2026-12420 · Malicious code in prokit-core (npm)MAL-2026-12495 · Malicious code in viem-toolkit (npm)MAL-2026-12425 · Malicious code in react-table-core (npm)MAL-2026-12372 · Malicious code in eth-crypto-utils (npm)MAL-2026-12384 · Malicious code in form-bnpl-dolyame-component-object (npm)MAL-2026-12354 · Malicious code in code-analyzer-mcp (npm)MAL-2026-12449 · Malicious code in statist-browser-typed-client-mb.reliability.android.metrics (npm)MAL-2026-12433 · Malicious code in saas-f-lego-landings (npm)MAL-2026-12396 · Malicious code in log-min (npm)MAL-2026-12448 · Malicious code in statist-browser-typed-client-mb.product.operations (npm)MAL-2026-12340 · Malicious code in block_package (npm)MAL-2026-12401 · Malicious code in mcp-audit-sync-internal (npm)MAL-2026-12490 · Malicious code in uniswap-sdk-v4 (npm)MAL-2026-12369 · Malicious code in elephant-array-utils (npm)MAL-2026-12455 · Malicious code in statist-browser-typed-client-twork.tsales.nitro.metrics (npm)MAL-2026-12470 · Malicious code in streak-metricsa (npm)MAL-2026-12383 · Malicious code in foodi (npm)MAL-2026-12462 · Malicious code in streak-day-engine (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。