OpenSSF Malicious Packages · OSV format
MAL-2026-11349 · Malicious code in pretty-log-cli (npm)MAL-2026-11168 · Malicious code in postcss-motion-utils (npm)MAL-2026-11059 · Malicious code in pp-react-ui5 (npm)MAL-2026-10980 · Malicious code in nolby (npm)MAL-2026-10743 · Malicious code in nordpass (npm)MAL-2026-10104 · Malicious code in px8my (npm)MAL-2026-6482 · Malicious code in kelly-stake (npm)MAL-2026-6437 · Malicious code in logfmt-core (npm)MAL-2026-6338 · Malicious code in log-taker (npm)MAL-2026-11472 · Malicious code in mcp-server-boilerplate (npm)MAL-2026-11471 · Malicious code in maximumsats-mcp (npm)MAL-2026-11328 · Malicious code in logform-core (npm)MAL-2026-11193 · Malicious code in litespeed-cache (npm)MAL-2026-11029 · Malicious code in lychee-norm-cache (npm)MAL-2026-11014 · Malicious code in kijai (npm)MAL-2026-10638 · Malicious code in monogrok (npm)MAL-2026-5777 · Malicious code in field-plus (npm)MAL-2026-11517 · Malicious code in internallib_v688 (npm)MAL-2026-11309 · Malicious code in famshot (npm)MAL-2026-11086 · Malicious code in fazzgram (npm)MAL-2026-11056 · Malicious code in gpaas-paypal (npm)MAL-2026-11028 · Malicious code in helix-deploy (npm)MAL-2026-10732 · Malicious code in hehehe (npm)MAL-2026-6368 · Malicious code in decimal-format-utils (npm)MAL-2026-5624 · Malicious code in edu-npm-postinstall-demo2 (npm)MAL-2026-5623 · Malicious code in edu-npm-dependency-chain-demo (npm)MAL-2026-11460 · Malicious code in create-remotion (npm)MAL-2026-11457 · Malicious code in capacitor-assets (npm)MAL-2026-11083 · Malicious code in edu-npm-helper-beta (npm)MAL-2026-11082 · Malicious code in edu-npm-helper-alpha (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。