OpenSSF Malicious Packages · OSV format
MAL-2026-6952 · Malicious code in whs4_npm_test (npm)MAL-2026-6951 · Malicious code in whs4_npm (npm)MAL-2026-6751 · Malicious code in bytekit (PyPI)MAL-2026-6710 · Malicious code in vitest-agent (npm)MAL-2026-6080 · Malicious code in boardflow (PyPI)MAL-2026-5316 · Malicious code in gpsea (PyPI)MAL-2026-5315 · Malicious code in ensmallen (PyPI)MAL-2026-5301 · Malicious code in mflux-streamlit (PyPI)MAL-2026-5298 · Malicious code in executor-engine (PyPI)MAL-2026-4793 · Malicious code in vxui-react (npm)MAL-2026-6900 · Malicious code in txs-data (npm)MAL-2026-6476 · Malicious code in typedecode (npm)MAL-2026-6288 · Malicious code in ts-numbering (npm)MAL-2026-6278 · Malicious code in ts-wross (npm)MAL-2026-4699 · Malicious code in utils-mf (npm)MAL-2026-6884 · Malicious code in syncora (npm)MAL-2026-6199 · Malicious code in ts-big-ecro (npm)MAL-2026-6875 · Malicious code in secure-box (npm)MAL-2026-6506 · Malicious code in pump-laserstream-parser (npm)MAL-2026-6287 · Malicious code in poly-utils (npm)MAL-2026-5265 · Malicious code in node-env-resolver-nextjs (npm)MAL-2026-5264 · Malicious code in node-env-resolver-dotenvx (npm)MAL-2026-5263 · Malicious code in node-env-resolver-aws (npm)MAL-2026-5888 · Malicious code in middleware-jwt (npm)MAL-2026-5791 · Malicious code in mddriver (npm)MAL-2026-5384 · Malicious code in enquriers (npm)MAL-2026-5259 · Malicious code in github-archiver (npm)MAL-2026-5257 · Malicious code in executable-stories-react (npm)MAL-2026-5255 · Malicious code in executable-stories-mcp (npm)MAL-2026-5253 · Malicious code in executable-stories-init (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。