OpenSSF Malicious Packages · OSV format
MAL-2026-6923 · Malicious code in notifier-utils (npm)MAL-2026-6797 · Malicious code in mongoose-lean-hooks (npm)MAL-2026-6582 · Malicious code in openai-agents-helpers (npm)MAL-2026-3509 · Malicious code in pp-react-v5 (npm)MAL-2026-6921 · Malicious code in jsf-utils (npm)MAL-2026-6281 · Malicious code in libsignal-node-travatiger (npm)MAL-2026-10088 · Malicious code in lovable-tager (npm)MAL-2026-6962 · Malicious code in gas-log (npm)MAL-2026-6201 · Malicious code in eth-util (npm)MAL-2026-10087 · Malicious code in eslint-plus (npm)MAL-2026-6726 · Malicious code in db-convertor (npm)MAL-2026-6657 · Malicious code in authsessionbridge (npm)MAL-2026-6656 · Malicious code in authmatrix (npm)MAL-2026-6655 · Malicious code in auth-state-service (npm)MAL-2026-6576 · Malicious code in checkmarx-claude-cache (npm)MAL-2026-5565 · Malicious code in ai-sdk-helpers (npm)MAL-2026-6789 · Malicious code in @checkrhq/adjudication-api-client (npm)MAL-2026-10086 · Malicious code in dl-pp-latm (npm)MAL-2026-10083 · Malicious code in clob-math-v2 (npm)MAL-2026-6515 · Malicious code in sqligen (PyPI)MAL-2026-6051 · Malicious code in telegram-lite-grabber (PyPI)MAL-2026-5876 · Malicious code in temp-development-package-test (PyPI)MAL-2026-5531 · Malicious code in telegramlite (PyPI)MAL-2026-5326 · Malicious code in tiktoken-mcp (PyPI)MAL-2026-5305 · Malicious code in tlask (PyPI)MAL-2026-5279 · Malicious code in uprobe (PyPI)MAL-2026-10020 · Malicious code in playwrightr (PyPI)MAL-2026-6969 · Malicious code in vite-json-pwa (npm)MAL-2026-6953 · Malicious code in whs4_pnm (npm)MAL-2026-6950 · Malicious code in whs4_nmp (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。