OpenSSF Malicious Packages · OSV format
MAL-2026-3165 · Malicious code in chai-as-redeployed (npm)MAL-2026-3164 · Malicious code in chai-as-char (npm)MAL-2026-3162 · Malicious code in apple-pki-cert-validator (npm)MAL-2026-3161 · Malicious code in apple-internal-telemetry-service (npm)MAL-2026-3160 · Malicious code in apple-internal-pki-utils (npm)MAL-2026-3159 · Malicious code in apple-internal-pki-trust-v5 (npm)MAL-2026-3157 · Malicious code in apple-internal-auth-v3 (npm)MAL-2026-3152 · Malicious code in apple-coredata-internal-service (npm)MAL-2026-3006 · Malicious code in changelog-utils-structured-logger (npm)MAL-2026-3005 · Malicious code in changelog-cli-logger (npm)MAL-2026-2972 · Malicious code in aven_types (npm)MAL-2026-2961 · Malicious code in apple-internal-security-poc-frank (npm)MAL-2026-2898 · Malicious code in chai-str (npm)MAL-2026-2893 · Malicious code in chai-as-mobj (npm)MAL-2026-2892 · Malicious code in chai-as-inserted (npm)MAL-2026-2888 · Malicious code in chai-as-encrypted (npm)MAL-2026-2642 · Malicious code in chatbotloader (npm)MAL-2026-2641 · Malicious code in chai-as-refined (npm)MAL-2026-2640 · Malicious code in bytefrontier-core (npm)MAL-2026-2639 · Malicious code in bytefrontier (npm)MAL-2026-2638 · Malicious code in billing-paywidget (npm)MAL-2026-2637 · Malicious code in apmfe (npm)MAL-2026-2599 · Malicious code in ccn-common-react-library (npm)MAL-2026-2597 · Malicious code in @zgny/onboarding-consumer (npm)MAL-2026-1557 · Malicious code in add-react-displayname (npm)MAL-2026-1320 · Malicious code in chain-promised-await (npm)MAL-2025-47972 · Malicious code in aes-create-ipheriv (npm)MAL-2025-149905 · Malicious code in aes-core-valid-ipherv (npm)MAL-2026-5056 · Malicious code in @trp-individual-investor-adv-disc/adv-shared (npm)MAL-2026-5050 · Malicious code in @rsi-community/hub-client-app (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。