OpenSSF Malicious Packages · OSV format
MAL-2026-6446 · Malicious code in base62-86x (npm)MAL-2026-6142 · Malicious code in db-connector-log (npm)MAL-2026-5604 · Malicious code in cache-section-helper (npm)MAL-2026-5396 · Malicious code in @sqlite-node/createsql (npm)MAL-2026-5147 · Malicious code in @redhat-cloud-services/tsc-transform-imports (npm)MAL-2026-5146 · Malicious code in @redhat-cloud-services/remediations-client (npm)MAL-2026-5142 · Malicious code in @redhat-cloud-services/insights-client (npm)MAL-2026-5141 · Malicious code in @redhat-cloud-services/host-inventory-client (npm)MAL-2026-5139 · Malicious code in @redhat-cloud-services/hcc-kessel-mcp (npm)MAL-2026-5136 · Malicious code in @redhat-cloud-services/frontend-components-notifications (npm)MAL-2026-5135 · Malicious code in @redhat-cloud-services/frontend-components-advisor-components (npm)MAL-2026-5134 · Malicious code in @redhat-cloud-services/config-manager-client (npm)MAL-2026-5126 · Malicious code in @redhat-cloud-services/frontend-components-config (npm)MAL-2026-5153 · Malicious code in @att-ebiz/abs-components-bc (npm)MAL-2026-10158 · Malicious code in notify-utilities (npm)MAL-2026-10156 · Malicious code in notify-logs (npm)MAL-2026-10154 · Malicious code in notify-dist (npm)MAL-2026-10153 · Malicious code in notifier-log (npm)MAL-2026-10152 · Malicious code in notifier-funcs (npm)MAL-2026-10159 · Malicious code in npm-rce-safe-proof-yourname (npm)MAL-2026-10141 · Malicious code in @genie-auth/config (npm)MAL-2026-10140 · Malicious code in @amtrav/webservice (npm)MAL-2026-10077 · Malicious code in type-slint (npm)MAL-2026-10132 · Malicious code in react-jsonwebtoken (npm)MAL-2026-10111 · Malicious code in nodepack-daemon (npm)MAL-2026-10149 · Malicious code in polymarket-gamma-apis (npm)MAL-2026-10070 · Malicious code in polymarket-kelly-stake-math (npm)MAL-2026-5148 · Malicious code in @redhat-cloud-services/vulnerabilities-client (npm)MAL-2026-5119 · Malicious code in @redhat-cloud-services/types (npm)MAL-2026-10050 · Malicious code in chai-defender (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。