OpenSSF Malicious Packages · OSV format
MAL-2026-6791 · Malicious code in npm-show-date-proof-strings (npm)MAL-2026-6334 · Malicious code in parket-flow (npm)MAL-2026-6303 · Malicious code in react-simple-utils-kit (npm)MAL-2026-6285 · Malicious code in new-solt (npm)MAL-2026-6284 · Malicious code in new-helper (npm)MAL-2026-5882 · Malicious code in redis-type-os (npm)MAL-2026-5880 · Malicious code in nat-ulid (npm)MAL-2026-10016 · Malicious code in qlkube (npm)MAL-2026-6591 · Malicious code in ledgerflow-deploy-utils (npm)MAL-2026-6282 · Malicious code in local-ip-helper (npm)MAL-2026-5750 · Malicious code in mailconfirmer (npm)MAL-2026-10064 · Malicious code in multer-orm (npm)MAL-2026-6908 · Malicious code in express-deflect (npm)MAL-2026-6260 · Malicious code in free-anthropic-claude (npm)MAL-2026-5355 · Malicious code in ethereum-kit-1 (npm)MAL-2026-6332 · Malicious code in cursorai-agent (npm)MAL-2026-6050 · Malicious code in create-mastra (npm)MAL-2026-5851 · Malicious code in epm-service-module-v2 (npm)MAL-2026-5682 · Malicious code in coral-wraith (npm)MAL-2026-5640 · Malicious code in ecto-corsair-whisper-6f3b9 (npm)MAL-2026-5353 · Malicious code in crypto-utils-7 (npm)MAL-2026-3288 · Malicious code in common-tg-service (npm)MAL-2026-10009 · Malicious code in chain-api-sdk (npm)MAL-2026-6984 · Malicious code in @vite-ln/build-ts (npm)MAL-2026-6914 · Malicious code in @sqlite-access/nodesql (npm)MAL-2026-6741 · Malicious code in @node-cloud/create (npm)MAL-2026-6416 · Malicious code in block-slot (npm)MAL-2026-6111 · Malicious code in @rafaelsene01/agent-flow (npm)MAL-2026-6022 · Malicious code in @mastra/express (npm)MAL-2026-5997 · Malicious code in @mastra/agent-builder (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。