OpenSSF Malicious Packages · OSV format
MAL-2026-6343 · Malicious code in thidweb (npm)MAL-2026-6342 · Malicious code in therdweb (npm)MAL-2026-5529 · Malicious code in v018-axios-cdntest (npm)MAL-2026-10189 · Malicious code in tinymask-js (npm)MAL-2026-6340 · Malicious code in rainbownkit (npm)MAL-2026-6339 · Malicious code in rainbokit (npm)MAL-2026-6097 · Malicious code in roblox-api-client (npm)MAL-2026-10427 · Malicious code in svg-fetcher (npm)MAL-2026-5772 · Malicious code in npx-whoami-demo (npm)MAL-2026-10488 · Malicious code in permcarmserver (npm)MAL-2026-6690 · Malicious code in log-taker1 (npm)MAL-2026-5712 · Malicious code in jextic-eclib (npm)MAL-2026-10163 · Malicious code in llama-tokenizer (npm)MAL-2026-6705 · Malicious code in hardhat-compile-ethers (npm)MAL-2026-5555 · Malicious code in express-timer (npm)MAL-2026-5554 · Malicious code in express-self-destruct2 (npm)MAL-2026-5553 · Malicious code in express-self-destruct (npm)MAL-2026-10532 · Malicious code in fluterjs (npm)MAL-2026-10451 · Malicious code in gifuct (npm)MAL-2026-10426 · Malicious code in chai-log (npm)MAL-2026-6564 · Malicious code in @thone33/core-utils (npm)MAL-2026-6563 · Malicious code in @thone33/analytics-injector (npm)MAL-2026-5922 · Malicious code in @kalipto/local (npm)MAL-2026-5723 · Malicious code in @ci-lifecycle-test/postinstall-ping (npm)MAL-2026-5552 · Malicious code in @my_name_is_khn/express-security-tool-v3 (npm)MAL-2026-5551 · Malicious code in @my_name_is_khn/express-security-tool-v1 (npm)MAL-2026-5550 · Malicious code in @my_name_is_khn/express-security-tool (npm)MAL-2026-10627 · Malicious code in @sqlite-frame/nodesql (npm)MAL-2026-11085 · Malicious code in fazzanime (npm)MAL-2026-11077 · Malicious code in @sqlite-tag/sql-creator (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。