OpenSSF Malicious Packages · OSV format
MAL-2026-10938 · Malicious code in twiliointernal-messaging-toolbox (npm)MAL-2026-10935 · Malicious code in twilio-platform-async-data-fetch (npm)MAL-2026-10773 · Malicious code in telemetry-axios (npm)MAL-2026-11486 · Malicious code in smart-npv-mcp (npm)MAL-2026-11482 · Malicious code in sap-mcp-facilitator (npm)MAL-2026-11479 · Malicious code in rollup-plugin-polyfill-hold (npm)MAL-2026-11478 · Malicious code in rollup-plugin-polyfill-helper (npm)MAL-2026-11035 · Malicious code in streak-bucket-lib (npm)MAL-2026-10982 · Malicious code in streak-daycount (npm)MAL-2026-10972 · Malicious code in signzy-field-level-encrypter (npm)MAL-2026-10778 · Malicious code in relativity-pdfjs-dist (npm)MAL-2026-10439 · Malicious code in react-hot-svg (npm)MAL-2026-11475 · Malicious code in pm-claude-skills-mcp (npm)MAL-2026-11474 · Malicious code in paraglide-js (npm)MAL-2026-11473 · Malicious code in metrics-ui (npm)MAL-2026-11101 · Malicious code in motion-forge-css (npm)MAL-2026-11064 · Malicious code in page-navigation (npm)MAL-2026-10761 · Malicious code in my-tailwind-gutenberg-block (npm)MAL-2026-11513 · Malicious code in internallib_v568 (npm)MAL-2026-11512 · Malicious code in internallib_v524 (npm)MAL-2026-11470 · Malicious code in kip-mcp-http (npm)MAL-2026-11469 · Malicious code in iwomm-mcp (npm)MAL-2026-11468 · Malicious code in install-native-host (npm)MAL-2026-11087 · Malicious code in kalipto-runtime (npm)MAL-2026-10960 · Malicious code in markscan (npm)MAL-2026-10957 · Malicious code in iphouse (npm)MAL-2026-10923 · Malicious code in lwc-slds-lbc (npm)MAL-2026-10922 · Malicious code in lambda-cloudwatch-cdk (npm)MAL-2026-10921 · Malicious code in iot-kfh-s3 (npm)MAL-2026-10696 · Malicious code in loader1 (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。