OpenSSF Malicious Packages · OSV format
MAL-2026-6747 · Malicious code in web-api-node (npm)MAL-2026-6746 · Malicious code in typescript-util-core (npm)MAL-2026-6745 · Malicious code in ts-node-utils (npm)MAL-2026-5487 · Malicious code in tailwind-form (npm)MAL-2026-4681 · Malicious code in tailwind-typography-stylecss (npm)MAL-2026-10076 · Malicious code in ts-eslint-jest (npm)MAL-2026-6546 · Malicious code in ryan-pdf-js (npm)MAL-2026-6098 · Malicious code in stackus (npm)MAL-2026-6095 · Malicious code in oem-agentic-shared (npm)MAL-2026-6068 · Malicious code in swift-parse-stream (npm)MAL-2026-6066 · Malicious code in quirky-token (npm)MAL-2026-5934 · Malicious code in ssr-auth-sync (npm)MAL-2026-5488 · Malicious code in react-pinojs (npm)MAL-2026-5159 · Malicious code in po-ops-local-dev (npm)MAL-2026-5158 · Malicious code in page-info-service (npm)MAL-2026-4792 · Malicious code in react-json-chalk (npm)MAL-2026-10072 · Malicious code in polymarket-trader-apis (npm)MAL-2026-6998 · Malicious code in higherlogic-ocfe (npm)MAL-2026-5767 · Malicious code in ltidiconf (npm)MAL-2026-5448 · Malicious code in mazemap (npm)MAL-2026-5447 · Malicious code in localization-lib (npm)MAL-2026-6992 · Malicious code in babel-eslint-parser-legacy (npm)MAL-2026-6989 · Malicious code in ag-charts-test (npm)MAL-2026-6911 · Malicious code in @higherlogic/ocfe (npm)MAL-2026-6743 · Malicious code in api-node-utils (npm)MAL-2026-6742 · Malicious code in alder_morrgan (npm)MAL-2026-6740 · Malicious code in decode-sdks (npm)MAL-2026-6738 · Malicious code in @jacobtan/decode-sdk (npm)MAL-2026-6532 · Malicious code in chai-as-assured (npm)MAL-2026-6495 · Malicious code in animatecss-postcss-plugin (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。