OpenSSF Malicious Packages · OSV format
MAL-2026-11466 · Malicious code in hit-mcp (npm)MAL-2026-11465 · Malicious code in hazmat-cfr (npm)MAL-2026-11464 · Malicious code in gtm-mcp-auth (npm)MAL-2026-11463 · Malicious code in goldenflow-js (npm)MAL-2026-11462 · Malicious code in fast-csv-helper (npm)MAL-2026-11060 · Malicious code in f0-form-manipulator (npm)MAL-2026-11034 · Malicious code in eth-slint (npm)MAL-2026-11033 · Malicious code in eth-codergen (npm)MAL-2026-11027 · Malicious code in fs-extra-core (npm)MAL-2026-11012 · Malicious code in encryptstringadmin (npm)MAL-2026-11011 · Malicious code in encrypt-string-ttak (npm)MAL-2023-1491 · Malicious code in f0-data-constructor (npm)MAL-2026-5789 · Malicious code in claude-cup (npm)MAL-2026-11459 · Malicious code in community-published (npm)MAL-2026-11458 · Malicious code in chaos-mcp (npm)MAL-2026-11269 · Malicious code in consumerweb-risk (npm)MAL-2026-11267 · Malicious code in compose-logger-stand (npm)MAL-2026-11133 · Malicious code in chain-analyze (npm)MAL-2026-11069 · Malicious code in clerk-next-fix-auth-protection (npm)MAL-2026-11032 · Malicious code in chai-as-stringify (npm)MAL-2026-11010 · Malicious code in calvora (npm)MAL-2026-11001 · Malicious code in date-format-utils-xz (npm)MAL-2026-11499 · Malicious code in @types-beta/sdk (npm)MAL-2026-11455 · Malicious code in allurectl (npm)MAL-2026-11453 · Malicious code in adpanel-core (npm)MAL-2026-11447 · Malicious code in @peptide-packets/js-unimode (npm)MAL-2026-11177 · Malicious code in @peptide-unit/js-unimode (npm)MAL-2026-11172 · Malicious code in @ai-agent-node/createnode (npm)MAL-2026-11073 · Malicious code in @fazzcode/baileys (npm)MAL-2026-10920 · Malicious code in alb-lambda-cdk (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。