OpenSSF Malicious Packages · OSV format
MAL-2026-11521 · Malicious code in psbt-helpers (PyPI)MAL-2026-11520 · Malicious code in psbt-utils (PyPI)MAL-2026-11992 · Malicious code in workbench-browser-server (npm)MAL-2026-11991 · Malicious code in verdaccio-tarball-local-storage (npm)MAL-2026-11990 · Malicious code in verdaccio-okta-oauth (npm)MAL-2026-11989 · Malicious code in umadev (npm)MAL-2026-11988 · Malicious code in tslint-folder-schema (npm)MAL-2026-11985 · Malicious code in rwc-client (npm)MAL-2026-11984 · Malicious code in qlik-object-conversion (npm)MAL-2026-11981 · Malicious code in pob-test-typescript-package-in-monorepo (npm)MAL-2026-11980 · Malicious code in pob-test-package-in-monorepo (npm)MAL-2026-11979 · Malicious code in picasso.js (npm)MAL-2026-11976 · Malicious code in native-frontend-orb (npm)MAL-2026-11975 · Malicious code in http-metrics-middleware (npm)MAL-2026-11974 · Malicious code in hamus.js (npm)MAL-2026-11973 · Malicious code in frontend-orb (npm)MAL-2026-11972 · Malicious code in folder-lint (npm)MAL-2026-11969 · Malicious code in example-js-project (npm)MAL-2026-11968 · Malicious code in eslint-plugin-folder-schema (npm)MAL-2026-11967 · Malicious code in editable-contracts (npm)MAL-2026-11965 · Malicious code in conv-context-next (npm)MAL-2026-11962 · Malicious code in babel-plugin-linaria-css-to-undefined (npm)MAL-2026-11961 · Malicious code in @workbench-stack/core (npm)MAL-2026-11960 · Malicious code in @umacloud/knowledge (npm)MAL-2026-11959 · Malicious code in @umacloud/cli-win32-x64 (npm)MAL-2026-11958 · Malicious code in @umacloud/cli-linux-x64 (npm)MAL-2026-11957 · Malicious code in @umacloud/cli-linux-musl-x64 (npm)MAL-2026-11956 · Malicious code in @umacloud/cli-linux-musl-arm64 (npm)MAL-2026-11952 · Malicious code in @thiennq/docs-viewer (npm)MAL-2026-11809 · Malicious code in @qlik/sprout-react-table (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。