OpenSSF Malicious Packages · OSV format
MAL-2026-3612 · Malicious code in jwscube (npm)MAL-2026-3174 · Malicious code in internal-sys-audit-check (npm)MAL-2026-3172 · Malicious code in frank-newton3-user-hunt (npm)MAL-2026-3008 · Malicious code in json-spacer (npm)MAL-2026-3007 · Malicious code in json-dec (npm)MAL-2026-2976 · Malicious code in gleb-js (npm)MAL-2026-2959 · Malicious code in internal_insights_enabled (npm)MAL-2026-2827 · Malicious code in js-logger-pack (npm)MAL-2025-47979 · Malicious code in jito-sub-aes-ipheriv (npm)MAL-2026-4796 · Malicious code in fastjsonlog (npm)MAL-2026-4536 · Malicious code in corelia (npm)MAL-2026-4294 · Malicious code in flow-parser-oxidized (npm)MAL-2026-3725 · Malicious code in deltaprime-primeloans (npm)MAL-2026-3202 · Malicious code in eslint-plugin-skyscanner-dates (npm)MAL-2026-2966 · Malicious code in com.tencent.puerts.agent (npm)MAL-2026-2901 · Malicious code in env_express (npm)MAL-2026-2687 · Malicious code in com.baogong.app_push_permission (npm)MAL-2026-2601 · Malicious code in dwaiter-company-web (npm)MAL-2026-5061 · Malicious code in chai-use-test (npm)MAL-2026-5060 · Malicious code in chai-extensions-extras (npm)MAL-2026-5059 · Malicious code in chai-bundle (npm)MAL-2026-4307 · Malicious code in chai-as-redeploy (npm)MAL-2026-4293 · Malicious code in chai-as-float (npm)MAL-2026-4292 · Malicious code in chai-as-buffer (npm)MAL-2026-3780 · Malicious code in aliyun-internal-config (npm)MAL-2026-3657 · Malicious code in chai-as-streamed (npm)MAL-2026-3304 · Malicious code in apcyber-test-package (npm)MAL-2026-3276 · Malicious code in accesso-angular-cache-buster (npm)MAL-2026-3168 · Malicious code in apple-internal-config (npm)MAL-2026-3167 · Malicious code in apple-infra-stealth-audit (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。