OpenSSF Malicious Packages · OSV format
MAL-2026-4840 · Malicious code in @bcs-bank-complex-ui/deeplink (npm)MAL-2026-3344 · Malicious code in @bold-commerce/stacks-ui (npm)MAL-2026-3320 · Malicious code in @google-pay-trust/start (npm)MAL-2026-3319 · Malicious code in @google-pay-trust/init-google-pay-result (npm)MAL-2026-3318 · Malicious code in @b2b_blocker/hide_activation_error (npm)MAL-2026-3317 · Malicious code in @apple-pay-trust/destroy (npm)MAL-2026-3316 · Malicious code in @apple-pay-trust/check-apple-pay (npm)MAL-2026-3004 · Malicious code in @nklkas/hyperliquid (npm)MAL-2026-3003 · Malicious code in @amsterdam-local/forms-component-library (npm)MAL-2026-2971 · Malicious code in @usealloy/typegen (npm)MAL-2026-2970 · Malicious code in @usealloy/component-library (npm)MAL-2026-2969 · Malicious code in @usealloy/api-contract (npm)MAL-2026-2596 · Malicious code in @spreadjs/js-calc (npm)MAL-2026-2595 · Malicious code in @sports-api/api-sdk (npm)MAL-2026-2593 · Malicious code in @sage-active/ui (npm)MAL-2026-2592 · Malicious code in @relxui/react (npm)MAL-2026-2591 · Malicious code in @pes-ui/components (npm)MAL-2026-2590 · Malicious code in @op-microfrontends/config (npm)MAL-2026-2588 · Malicious code in @lamoda/seller-ui-kit (npm)MAL-2026-2587 · Malicious code in @kucoin-gbiz-next/tools (npm)MAL-2026-2586 · Malicious code in @ids-alpha/theme (npm)MAL-2026-2582 · Malicious code in @guards-lib/auth (npm)MAL-2026-2579 · Malicious code in @bookiply/core (npm)MAL-2026-2575 · Malicious code in @ascend-ops/web-client (npm)MAL-2026-2574 · Malicious code in @amplify-js/datastore (npm)MAL-2026-2421 · Malicious code in @mgcrae/pino-pretty-logger (npm)MAL-2025-47916 · Malicious code in @hash-validator/v2 (npm)MAL-2025-47913 · Malicious code in @bs58-utils/wrapper (npm)MAL-2025-190634 · Malicious code in @validate-pubkey/hex (npm)MAL-2025-1011 · Malicious code in @infinid-indonesia/ui-kit (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。