OpenSSF Malicious Packages · OSV format
MAL-2026-12500 · Malicious code in warp-drive-internal-tooling (npm)MAL-2026-12335 · Malicious code in aegis-runtime (npm)MAL-2026-12345 · Malicious code in calendar-streak-core (npm)MAL-2026-12347 · Malicious code in ccxt-trading (npm)MAL-2026-12501 · Malicious code in william-data-formatter-x (npm)MAL-2026-12377 · Malicious code in express-mongo-santi (npm)MAL-2026-12309 · Malicious code in statist-browser-typed-client-jumptaxi.feature.contacts (npm)MAL-2026-12027 · Malicious code in tailwind-anime (npm)MAL-2026-12205 · Malicious code in simple-date-formatter-util-4 (npm)MAL-2026-11108 · Malicious code in string-format-kit (npm)MAL-2026-12190 · Malicious code in retracfix (npm)MAL-2026-5244 · Malicious code in discord-search (npm)MAL-2026-5243 · Malicious code in dbmux (npm)MAL-2026-5240 · Malicious code in create-cf-token (npm)MAL-2026-12026 · Malicious code in cors-version (npm)MAL-2026-11522 · Malicious code in beaver-ui-form (npm)MAL-2026-12147 · Malicious code in beaver-ui-icon-lock (npm)MAL-2026-12144 · Malicious code in beaver-ui-drawer (npm)MAL-2026-12143 · Malicious code in beaver-ui-breadcrumbs (npm)MAL-2026-12141 · Malicious code in beaver-ui-actions-button (npm)MAL-2026-12140 · Malicious code in arbocrate-sla-prober-arbocrate-sla-prober-core (npm)MAL-2026-12137 · Malicious code in accounts-timeline (npm)MAL-2026-12134 · Malicious code in accounts-limits (npm)MAL-2026-12133 · Malicious code in accounts-forms (npm)MAL-2026-12132 · Malicious code in accounts-ddos-shield (npm)MAL-2026-12131 · Malicious code in accounts-constants (npm)MAL-2026-12130 · Malicious code in accounts-card-design-picker (npm)MAL-2026-12129 · Malicious code in accounts-appointment (npm)MAL-2026-12128 · Malicious code in aasp-tent-aasp-tent-core (npm)MAL-2026-12126 · Malicious code in a.poltoradnev-package-b (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。