OpenSSF Malicious Packages · OSV format
MAL-2026-4339 · Malicious code in wm-plugin-native-functions-restorer (npm)MAL-2026-4338 · Malicious code in wm-plugin-json-conditions (npm)MAL-2026-4337 · Malicious code in wm-plugin-create-iframe-capturing (npm)MAL-2026-4336 · Malicious code in webservices.rest-utils (npm)MAL-2026-4334 · Malicious code in vite-plugin-env-compat-plus (npm)MAL-2026-3248 · Malicious code in pwn-control (PyPI)MAL-2026-3027 · Malicious code in wrapped-logger-utils (npm)MAL-2026-2947 · Malicious code in moonbit-schema-utils (PyPI)MAL-2026-2946 · Malicious code in moonbit-metrics-validator (PyPI)MAL-2026-2945 · Malicious code in moonbit-locale-compat (PyPI)MAL-2026-2850 · Malicious code in value-slider (npm)MAL-2026-2661 · Malicious code in vip-landing (npm)MAL-2026-2660 · Malicious code in use-feature-flags-plugin (npm)MAL-2026-4199 · Malicious code in ts-logger-pack (npm)MAL-2026-2944 · Malicious code in turbo-leven (npm)MAL-2026-2943 · Malicious code in turbo-he (npm)MAL-2026-2904 · Malicious code in trackora-node (npm)MAL-2026-2903 · Malicious code in trackora-chain (npm)MAL-2026-2659 · Malicious code in ui-utils-udhay-alerts (npm)MAL-2026-2608 · Malicious code in symphony-core (npm)MAL-2026-5078 · Malicious code in raven-i18n-react (npm)MAL-2026-5074 · Malicious code in one-view-chat-ui-module (npm)MAL-2026-4170 · Malicious code in psxjson (npm)MAL-2026-2942 · Malicious code in optimized-fastest-levenshtein (npm)MAL-2026-2654 · Malicious code in pinstatsd (npm)MAL-2026-2653 · Malicious code in pinlogger (npm)MAL-2026-2652 · Malicious code in onewin-landing (npm)MAL-2026-2651 · Malicious code in one-translations (npm)MAL-2026-2650 · Malicious code in one-sdui (npm)MAL-2026-2649 · Malicious code in okxglobal (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。