OpenSSF Malicious Packages · OSV format
MAL-2026-10511 · Malicious code in type-swap (npm)MAL-2026-10510 · Malicious code in type-astr (npm)MAL-2026-10485 · Malicious code in polymarket-stake-kelly-math-check (npm)MAL-2026-6723 · Malicious code in electron-orbit (npm)MAL-2026-10508 · Malicious code in nodemon-elint (npm)MAL-2026-10504 · Malicious code in chai-as-verified (npm)MAL-2026-10509 · Malicious code in test_adminet (npm)MAL-2026-10484 · Malicious code in browser-use-headless (PyPI)MAL-2026-10496 · Malicious code in bubblestring (npm)MAL-2026-10495 · Malicious code in @quukk/opencode-clawmessenger (npm)MAL-2026-10494 · Malicious code in @quickcall/krew (npm)MAL-2026-10493 · Malicious code in insomnia-plugin-poc-m4gester-run (npm)MAL-2026-10487 · Malicious code in @outsmartly/metaobjects (npm)MAL-2026-10467 · Malicious code in polymarket-stake-kelly-math (npm)MAL-2026-6306 · Malicious code in @gleamkit/probe (npm)MAL-2026-10473 · Malicious code in claude-team-tracker (npm)MAL-2026-10440 · Malicious code in type-context (npm)MAL-2026-10447 · Malicious code in remarkable-table (npm)MAL-2026-6534 · Malicious code in react-dynammic-table-component (npm)MAL-2026-6533 · Malicious code in react-dynamic-table-compenent (npm)MAL-2026-10446 · Malicious code in react-markable-table (npm)MAL-2026-10452 · Malicious code in markdown-editable-table (npm)MAL-2026-10465 · Malicious code in node-sysmon-native (npm)MAL-2026-10455 · Malicious code in @origindev/ethaccount (npm)MAL-2026-10186 · Malicious code in google-caja-bower (npm)MAL-2026-10466 · Malicious code in polymarket-math-stake-kelly (npm)MAL-2026-10461 · Malicious code in gptlite (npm)MAL-2026-10458 · Malicious code in compliancepolicyserv (npm)MAL-2026-10459 · Malicious code in connectedmerchantsserv (npm)MAL-2026-10460 · Malicious code in datavaultx (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。