OpenSSF Malicious Packages · OSV format
MAL-2026-5222 · Malicious code in autotel-hono (npm)MAL-2026-5210 · Malicious code in ai-sdk-ollama (npm)MAL-2026-6765 · Malicious code in @marketfront/bannerpopup (npm)MAL-2026-6725 · Malicious code in @modhamanish/rn-mm-template (npm)MAL-2026-6309 · Malicious code in @nullzero/urlcat (npm)MAL-2026-6209 · Malicious code in @antoncarlos1/nodelamp (npm)MAL-2026-6074 · Malicious code in @mastra/redis (npm)MAL-2026-6073 · Malicious code in @mastra/observability (npm)MAL-2026-6072 · Malicious code in @mastra/loggers (npm)MAL-2026-6057 · Malicious code in @mastra/voice-playai (npm)MAL-2026-6056 · Malicious code in @mastra/react (npm)MAL-2026-6054 · Malicious code in @mastra/node-audio (npm)MAL-2026-6053 · Malicious code in @mastra/mem0 (npm)MAL-2026-6052 · Malicious code in @mastra/github-signals (npm)MAL-2026-6049 · Malicious code in @mastra/voice-openai-realtime (npm)MAL-2026-6048 · Malicious code in @mastra/voice-openai (npm)MAL-2026-6047 · Malicious code in @mastra/voice-google-gemini-live (npm)MAL-2026-6046 · Malicious code in @mastra/voice-google (npm)MAL-2026-6045 · Malicious code in @mastra/voice-elevenlabs (npm)MAL-2026-6044 · Malicious code in @mastra/voice-deepgram (npm)MAL-2026-6043 · Malicious code in @mastra/voice-aws-nova-sonic (npm)MAL-2026-6042 · Malicious code in @mastra/vectorize (npm)MAL-2026-6041 · Malicious code in @mastra/upstash (npm)MAL-2026-6040 · Malicious code in @mastra/turbopuffer (npm)MAL-2026-6039 · Malicious code in @mastra/temporal (npm)MAL-2026-6038 · Malicious code in @mastra/tavily (npm)MAL-2026-6037 · Malicious code in @mastra/stagehand (npm)MAL-2026-6035 · Malicious code in @mastra/s3vectors (npm)MAL-2026-6034 · Malicious code in @mastra/qdrant (npm)MAL-2026-6033 · Malicious code in @mastra/playground-ui (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。