OpenSSF Malicious Packages · OSV format
MAL-2026-6561 · Malicious code in skillspector (PyPI)MAL-2026-6273 · Malicious code in zod-pino (npm)MAL-2026-5812 · Malicious code in hello-test-s1 (PyPI)MAL-2026-5335 · Malicious code in xfoobar (PyPI)MAL-2026-5325 · Malicious code in ray-mcp-server (PyPI)MAL-2026-5275 · Malicious code in napari-ufish (PyPI)MAL-2026-6954 · Malicious code in wsh4_npm (npm)MAL-2026-6906 · Malicious code in xnder-sdk-js (npm)MAL-2026-6792 · Malicious code in wsh4-nmp (npm)MAL-2026-5491 · Malicious code in xnder-sdk (npm)MAL-2026-5268 · Malicious code in ulid-os (npm)MAL-2025-191440 · Malicious code in unemail (npm)MAL-2026-6388 · Malicious code in rapidsearch (npm)MAL-2026-5629 · Malicious code in sass-formats (npm)MAL-2026-6581 · Malicious code in ollama-helpers (npm)MAL-2026-6333 · Malicious code in mjs-eslint-service (npm)MAL-2026-6143 · Malicious code in node-vfs-polyfill (npm)MAL-2026-5965 · Malicious code in mastra (npm)MAL-2026-5266 · Malicious code in node-env-resolver-vite (npm)MAL-2026-5262 · Malicious code in node-env-resolver (npm)MAL-2026-5261 · Malicious code in mountly-tailwind (npm)MAL-2026-5676 · Malicious code in ioredis-typed (npm)MAL-2026-6442 · Malicious code in easy-time-format (npm)MAL-2026-5251 · Malicious code in executable-stories-demo (npm)MAL-2026-5249 · Malicious code in eslint-plugin-executable-stories-vitest (npm)MAL-2026-5245 · Malicious code in effect-analyzer (npm)MAL-2026-6930 · Malicious code in annotator-harvardx (npm)MAL-2026-5234 · Malicious code in awaitly (npm)MAL-2026-5229 · Malicious code in autotel-sentry (npm)MAL-2026-5228 · Malicious code in autotel-plugins (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。