OpenSSF Malicious Packages · OSV format
MAL-2026-10908 · Malicious code in hello-world-test-mh3 (PyPI)MAL-2026-10907 · Malicious code in hello-world-test-mh2 (PyPI)MAL-2026-10760 · Malicious code in abseil-py (PyPI)MAL-2026-6702 · Malicious code in vue-demi-fix (npm)MAL-2026-6320 · Malicious code in ts-escrow (npm)MAL-2026-6319 · Malicious code in ts-escro (npm)MAL-2026-11400 · Malicious code in thedata (npm)MAL-2026-11191 · Malicious code in zer0code (npm)MAL-2026-11105 · Malicious code in xo-twofa (npm)MAL-2026-11092 · Malicious code in txs-sdk-lib (npm)MAL-2026-11091 · Malicious code in txs-runner-lib (npm)MAL-2026-11090 · Malicious code in txs-random-lib (npm)MAL-2026-11089 · Malicious code in txs-builder (npm)MAL-2026-11019 · Malicious code in veskr (npm)MAL-2026-11018 · Malicious code in veldora (npm)MAL-2026-11016 · Malicious code in vantora (npm)MAL-2026-10782 · Malicious code in zoom-widget-xss-poc-paresh (npm)MAL-2026-10698 · Malicious code in websight2-p2p (npm)MAL-2026-10697 · Malicious code in websight-p2p (npm)MAL-2026-6715 · Malicious code in svgcraft-core (npm)MAL-2026-6707 · Malicious code in svgson-lite (npm)MAL-2026-6067 · Malicious code in scan-only (npm)MAL-2026-11481 · Malicious code in sap-mcp-config (npm)MAL-2026-11480 · Malicious code in routerbase-mcp (npm)MAL-2026-11477 · Malicious code in refbase-mcp (npm)MAL-2026-11088 · Malicious code in sixbails (npm)MAL-2026-10423 · Malicious code in supertokens-web (npm)MAL-2026-6439 · Malicious code in polymarket-stake-maths (npm)MAL-2026-6438 · Malicious code in polymarket-stake-math (npm)MAL-2026-11476 · Malicious code in polyprompt (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。