OpenSSF Malicious Packages · OSV format
MAL-2026-11395 · Malicious code in termly-namespace (npm)MAL-2026-11386 · Malicious code in srgb-linear (npm)MAL-2026-11350 · Malicious code in pulleeelll (npm)MAL-2026-11250 · Malicious code in bn.js-5 (npm)MAL-2026-11243 · Malicious code in aven_shared (npm)MAL-2026-11410 · Malicious code in wistia_namespace (npm)MAL-2026-11360 · Malicious code in pullingpackageeeeeeeeeee (npm)MAL-2026-11359 · Malicious code in pullingpackageeeeeeeeee (npm)MAL-2026-11358 · Malicious code in pullingpackageeeeeeeee (npm)MAL-2026-11357 · Malicious code in pullingpackageeeeeeee (npm)MAL-2026-11356 · Malicious code in pullingpackageeeeeee (npm)MAL-2026-11354 · Malicious code in pullingpackageee (npm)MAL-2026-11352 · Malicious code in pullingpackaged (npm)MAL-2026-11289 · Malicious code in ember-cli-deploy-derploy (npm)MAL-2026-11276 · Malicious code in decline (npm)MAL-2026-11271 · Malicious code in cross-sell (npm)MAL-2026-11266 · Malicious code in columns_changed (npm)MAL-2026-11265 · Malicious code in cocktail-lib (npm)MAL-2026-11254 · Malicious code in canvas-to (npm)MAL-2026-11253 · Malicious code in cancelling (npm)MAL-2026-11249 · Malicious code in bn.js-4 (npm)MAL-2026-11238 · Malicious code in apihost (npm)MAL-2026-11353 · Malicious code in pullingpackagee (npm)MAL-2026-11351 · Malicious code in pullingpackage (npm)MAL-2026-11209 · Malicious code in @dotconf-pro/dotenv (npm)MAL-2026-11208 · Malicious code in @dotconf-pro/dotconf-pro (npm)MAL-2026-11375 · Malicious code in rumjs (npm)MAL-2026-11387 · Malicious code in streak-metrics-core (npm)MAL-2026-11194 · Malicious code in n8n-nodes-trust-me-im-totally-safe (npm)MAL-2026-6695 · Malicious code in ts-bn-proto (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。