OpenSSF Malicious Packages · OSV format
MAL-2026-5648 · Malicious code in unified-ui-components-library (npm)MAL-2026-4521 · Malicious code in class-weaver (npm)MAL-2026-5564 · Malicious code in @tonsdk/core (npm)MAL-2026-5798 · Malicious code in @resolvx/core (npm)MAL-2026-5150 · Malicious code in @aonunited/angular (npm)MAL-2026-10575 · Malicious code in web-pop (npm)MAL-2026-10514 · Malicious code in nodemon-eslint (npm)MAL-2026-10513 · Malicious code in nodemon-client (npm)MAL-2026-10468 · Malicious code in nodemon-sync (npm)MAL-2026-10298 · Malicious code in changiairportpromax (npm)MAL-2026-5165 · Malicious code in @emcd-vue/loans (npm)MAL-2026-5164 · Malicious code in @emcd-vue/b2b-pay-form (npm)MAL-2026-5163 · Malicious code in @emcd-vue/auth (npm)MAL-2026-10569 · Malicious code in temp-cloak (npm)MAL-2026-10567 · Malicious code in string-morph (npm)MAL-2026-10563 · Malicious code in humanize-kit (npm)MAL-2026-10561 · Malicious code in dom-weave (npm)MAL-2026-10559 · Malicious code in avatar-forge (npm)MAL-2026-10555 · Malicious code in @codex2005/logger-core (npm)MAL-2026-10570 · Malicious code in valid-scope (npm)MAL-2026-10562 · Malicious code in duration-kit (npm)MAL-2026-10551 · Malicious code in elsisi-cli (npm)MAL-2026-10539 · Malicious code in postcss-animatecss (npm)MAL-2026-10537 · Malicious code in neon-postgres (npm)MAL-2026-10546 · Malicious code in viteplugiin (npm)MAL-2026-10531 · Malicious code in chain-devkit (npm)MAL-2026-10547 · Malicious code in pokee-data-utils (PyPI)MAL-2026-10530 · Malicious code in cbr-internal-utils (npm)MAL-2026-10541 · Malicious code in proxy-seller-mcp (npm)MAL-2026-10543 · Malicious code in skrill-payments (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。