OpenSSF Malicious Packages · OSV format
MAL-2026-10059 · Malicious code in cookie-parser-es (npm)MAL-2026-10057 · Malicious code in chunk-parser (npm)MAL-2026-10066 · Malicious code in nps-retrieval-diagnostics (npm)MAL-2026-10068 · Malicious code in polymarket-kelly-math (npm)MAL-2026-10071 · Malicious code in polymarket-kit (npm)MAL-2026-10069 · Malicious code in polymarket-kelly-maths (npm)MAL-2026-10081 · Malicious code in webrix-docs1 (npm)MAL-2026-10080 · Malicious code in webrix-docs (npm)MAL-2026-10052 · Malicious code in chai-promised-test (npm)MAL-2026-10040 · Malicious code in chai-as-balanced (npm)MAL-2026-10042 · Malicious code in chai-as-disarmed (npm)MAL-2026-10046 · Malicious code in chai-as-smart (npm)MAL-2026-3462 · Malicious code in @tanstack/eslint-plugin-start (npm)MAL-2026-6960 · Malicious code in pyqt6darktheme (PyPI)MAL-2026-7022 · Malicious code in tslint-conf (npm)MAL-2026-10011 · Malicious code in fusion-client (npm)MAL-2026-10010 · Malicious code in feedback-api (npm)MAL-2026-10017 · Malicious code in rabi-snooze-api (npm)MAL-2026-10008 · Malicious code in breeze-feature-flag-poc (npm)MAL-2026-10018 · Malicious code in security-console-ui (npm)MAL-2026-10015 · Malicious code in poc-node-npm (npm)MAL-2026-10007 · Malicious code in bizapi-portal (npm)MAL-2026-3411 · Malicious code in web3-py-checksum (PyPI)MAL-2026-3370 · Malicious code in sufiagent (PyPI)MAL-2026-5086 · Malicious code in polymarket-data (PyPI)MAL-2026-4740 · Malicious code in zod-to-js (npm)MAL-2026-4343 · Malicious code in wnba-parent (npm)MAL-2026-4342 · Malicious code in wm-w5g-preview (npm)MAL-2026-4341 · Malicious code in wm-plugin-set-walkme-language (npm)MAL-2026-4340 · Malicious code in wm-plugin-open-teach-me-after-deployable-played (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。