OpenSSF Malicious Packages · OSV format
MAL-2026-17837 · Malicious code in @sanzoffc/libsignal-node (npm)MAL-2026-17836 · Malicious code in @saazkira/libsignal-node (npm)MAL-2026-17835 · Malicious code in @saazkira/eslint-config (npm)MAL-2026-17825 · Malicious code in @revizahoshii/hoshino-mcp-server (npm)MAL-2026-17834 · Malicious code in @revizahoshii/hoshino-wam (npm)MAL-2026-17833 · Malicious code in @revizahoshii/hoshino-voip (npm)MAL-2026-17831 · Malicious code in @revizahoshii/hoshino-store-redis (npm)MAL-2026-17827 · Malicious code in @revizahoshii/hoshino-native (npm)MAL-2026-17824 · Malicious code in @revizahoshii/hoshino-fake-server (npm)MAL-2026-17829 · Malicious code in @revizahoshii/hoshino-store-mysql (npm)MAL-2026-17828 · Malicious code in @revizahoshii/hoshino-store-mongo (npm)MAL-2026-17832 · Malicious code in @revizahoshii/hoshino-store-sqlite (npm)MAL-2026-17830 · Malicious code in @revizahoshii/hoshino-store-postgres (npm)MAL-2026-17826 · Malicious code in @revizahoshii/hoshino-media-utils (npm)MAL-2026-17818 · Malicious code in @alipclutch/libsignal-node (npm)MAL-2026-17842 · Malicious code in @we3js/framework (npm)MAL-2026-17821 · Malicious code in @fazzcodestudio/fbot (npm)MAL-2026-17820 · Malicious code in @fazzcodestudio/baileys (npm)MAL-2026-17822 · Malicious code in @fazzcodestudio/mediaformater (npm)MAL-2026-17819 · Malicious code in @badzz88/eslint-config (npm)MAL-2026-17230 · Malicious code in llm-nebula (npm)MAL-2026-17531 · Malicious code in api-nebula (npm)MAL-2026-17368 · Malicious code in @mivesensei/baileys (npm)MAL-2026-17367 · Malicious code in @mikudeveloper/grace (npm)MAL-2026-17365 · Malicious code in @lendxntaa/baileys (npm)MAL-2026-17361 · Malicious code in @kanaraa/baileys (npm)MAL-2026-17360 · Malicious code in @jojoxyz/condemnedforce-baileys (npm)MAL-2026-17355 · Malicious code in @ikanngeming/ikannbail (npm)MAL-2026-16386 · Malicious code in @mikudeveloper/baileys (npm)MAL-2026-16276 · Malicious code in @lekzo/baileys (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。