OpenSSF Malicious Packages · OSV format
MAL-2026-10490 · Malicious code in @sqlite-panel/createsql (npm)MAL-2026-10448 · Malicious code in @sqlite-group/schema-generator (npm)MAL-2026-10390 · Malicious code in timmytuffknuckles9 (npm)MAL-2026-10389 · Malicious code in timmytuffknuckles6 (npm)MAL-2026-10388 · Malicious code in timmytuffknuckles3 (npm)MAL-2026-10386 · Malicious code in testdonotredeemit (npm)MAL-2026-10237 · Malicious code in tme-xca-react (npm)MAL-2026-10134 · Malicious code in stella-coder (npm)MAL-2026-10133 · Malicious code in stella-ai-cli (npm)MAL-2026-10454 · Malicious code in nodemon-async (npm)MAL-2026-10444 · Malicious code in markable-table (npm)MAL-2026-10430 · Malicious code in prettier-plugin-base (npm)MAL-2026-10364 · Malicious code in pasirianspirit (npm)MAL-2026-10334 · Malicious code in midnightrush (npm)MAL-2026-10573 · Malicious code in harpoon-package (npm)MAL-2026-10416 · Malicious code in kuaishou (npm)MAL-2026-10305 · Malicious code in ilovefemboys (npm)MAL-2026-10522 · Malicious code in flick-test-app (npm)MAL-2026-10214 · Malicious code in babel-preset-lib-client (npm)MAL-2026-6496 · Malicious code in @dervix/ws (npm)MAL-2026-10521 · Malicious code in @flcik/flick.js (npm)MAL-2026-10477 · Malicious code in @gleamkit/socket.io (npm)MAL-2026-10476 · Malicious code in @gleamkit/engine.io (npm)MAL-2026-10475 · Malicious code in @dervix/socket.io (npm)MAL-2026-10474 · Malicious code in @dervix/engine.io (npm)MAL-2026-10431 · Malicious code in @tailwind-ts/eslint-plugin (npm)MAL-2026-10429 · Malicious code in @nsub/nitxe (npm)MAL-2026-10282 · Malicious code in acidic (npm)MAL-2026-10220 · Malicious code in @jplopezy/connectivity-test-do-not-install (npm)MAL-2026-10574 · Malicious code in vite-plugin-config-paths (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。