OpenSSF Malicious Packages · OSV format
MAL-2026-2905 · Malicious code in simple-auth-basic (npm)MAL-2026-6412 · Malicious code in nabisco (npm)MAL-2026-5872 · Malicious code in pampipes (npm)MAL-2026-5734 · Malicious code in node-denv (npm)MAL-2026-5651 · Malicious code in ozonex-sdk (npm)MAL-2026-2914 · Malicious code in modern-events (npm)MAL-2026-1202 · Malicious code in mvn-runtime (npm)MAL-2026-1100 · Malicious code in ng-vzbootstrap (npm)MAL-2026-6295 · Malicious code in kdrive-utils (npm)MAL-2026-5870 · Malicious code in hot-validation-sdk (npm)MAL-2026-5502 · Malicious code in graphbase-js (npm)MAL-2026-1050 · Malicious code in launch-darkly-js (npm)MAL-2026-6722 · Malicious code in date-fns-lite (npm)MAL-2026-6588 · Malicious code in endpointmap (npm)MAL-2026-6411 · Malicious code in data-fetching-client (npm)MAL-2026-5869 · Malicious code in fabric-graphics (npm)MAL-2026-5668 · Malicious code in fed-callnative (npm)MAL-2026-5667 · Malicious code in experian-analytics-components (npm)MAL-2026-5501 · Malicious code in ethers-jss (npm)MAL-2026-1074 · Malicious code in dgxeon-soket (npm)MAL-2026-6662 · Malicious code in cmp-api-stub (npm)MAL-2026-6658 · Malicious code in bundrix (npm)MAL-2026-6654 · Malicious code in app-hotmart-blog-headless (npm)MAL-2026-6141 · Malicious code in clx-cookie-signature (npm)MAL-2026-5908 · Malicious code in chain-chai-test (npm)MAL-2026-5843 · Malicious code in chai-smart-assert (npm)MAL-2026-5699 · Malicious code in chai-web3-testkit (npm)MAL-2026-5505 · Malicious code in anaylze-json (npm)MAL-2026-5405 · Malicious code in comos-sdk (npm)MAL-2026-4168 · Malicious code in chai-as-vec (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。