OpenSSF Malicious Packages · OSV format
MAL-2026-17768 · Malicious code in cloudflare_module (npm)MAL-2026-17803 · Malicious code in hridoy-ultimate (npm)MAL-2026-17616 · Malicious code in web3-eth-utils (RubyGems)MAL-2026-17615 · Malicious code in wallet-crypto-utils (RubyGems)MAL-2026-17598 · Malicious code in eth-keystore-utils (RubyGems)MAL-2026-17597 · Malicious code in eth-address-utils (RubyGems)MAL-2026-17595 · Malicious code in crypto-mnemonic-tools (RubyGems)MAL-2026-17589 · Malicious code in btc-wallet-tools (RubyGems)MAL-2026-17587 · Malicious code in bitcoin-rpc-lite (RubyGems)MAL-2026-17776 · Malicious code in pay-methods-kmf (npm)MAL-2026-17775 · Malicious code in nitro-cjs-requirer (npm)MAL-2026-17773 · Malicious code in nested-lib (npm)MAL-2026-17747 · Malicious code in kmf-i18n (npm)MAL-2026-17746 · Malicious code in kmf-bootstrap (npm)MAL-2026-17771 · Malicious code in ksp-client-registry (npm)MAL-2026-17769 · Malicious code in deposit-limit-fe (npm)MAL-2026-17767 · Malicious code in another-very-long-name (npm)MAL-2026-17764 · Malicious code in @s4yhiitestpoc/r2-https (npm)MAL-2026-17777 · Malicious code in react-paginate-v5 (npm)MAL-2026-17770 · Malicious code in ksp-app (npm)MAL-2026-17786 · Malicious code in eth-gas-oracle (RubyGems)MAL-2026-17791 · Malicious code in multichain-rpc (RubyGems)MAL-2026-17801 · Malicious code in web3-signer-kit (RubyGems)MAL-2026-17790 · Malicious code in mev-sandwich-detect (RubyGems)MAL-2026-17782 · Malicious code in crypto-tax-export (RubyGems)MAL-2026-17779 · Malicious code in airdrop-eligibility-check (RubyGems)MAL-2026-17781 · Malicious code in btc-fee-estimator (RubyGems)MAL-2026-17783 · Malicious code in defi-yield-calculator (RubyGems)MAL-2026-17387 · Malicious code in arsya-baileys (npm)MAL-2026-17750 · Malicious code in @fer2809fl/baileys (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。