OpenSSF Malicious Packages · OSV format
MAL-2026-11230 · Malicious code in @sourav_chanduka/core-no-ngrok (npm)MAL-2026-11229 · Malicious code in @sourav_chanduka/core (npm)MAL-2026-11228 · Malicious code in @solana-utils/common (npm)MAL-2026-11234 · Malicious code in @web3utils/common (npm)MAL-2026-11233 · Malicious code in @web3-util/common (npm)MAL-2026-11279 · Malicious code in discord-rsc (npm)MAL-2026-11277 · Malicious code in discord-csr (npm)MAL-2026-11394 · Malicious code in tailwindcsssss (npm)MAL-2026-11225 · Malicious code in @relforce-dev/console-log (npm)MAL-2026-11224 · Malicious code in @pumpdot-fun/pump-swap-sdk (npm)MAL-2026-11223 · Malicious code in @pumpdot-fun/pump-sdk (npm)MAL-2026-11216 · Malicious code in @node-console-log/log (npm)MAL-2026-11314 · Malicious code in fwf (npm)MAL-2026-11226 · Malicious code in @santieich/homebridge-midea-lan (npm)MAL-2026-11240 · Malicious code in aruda (npm)MAL-2026-11339 · Malicious code in node-fetch-core (npm)MAL-2026-11338 · Malicious code in ncc-web (npm)MAL-2026-11337 · Malicious code in ncc-hyperapp (npm)MAL-2026-11336 · Malicious code in ncc-fonts (npm)MAL-2026-11218 · Malicious code in @nordea-web/ui (npm)MAL-2026-11217 · Malicious code in @nordea-web/core (npm)MAL-2026-11316 · Malicious code in hjw-nasa-lib (npm)MAL-2026-11284 · Malicious code in dwa-tridion-webapp (npm)MAL-2026-11403 · Malicious code in tsetnpmackage (npm)MAL-2026-11397 · Malicious code in testsetset (npm)MAL-2026-11215 · Malicious code in @meteora-sdk/core (npm)MAL-2026-11369 · Malicious code in react.jd (npm)MAL-2026-11368 · Malicious code in react.ja (npm)MAL-2026-11325 · Malicious code in kajl (npm)MAL-2026-11322 · Malicious code in installreact (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。