OpenSSF Malicious Packages · OSV format
MAL-2026-7461 · Malicious code in pygremlinbox-malware-credential-harvesting (PyPI)MAL-2026-7460 · Malicious code in pygremlinbox-malware-code-obfuscation (PyPI)MAL-2026-7459 · Malicious code in pygremlinbox-malware-c2-beacon (PyPI)MAL-2026-7457 · Malicious code in piirgg (PyPI)MAL-2026-7456 · Malicious code in notrandompacketname (PyPI)MAL-2026-7455 · Malicious code in myproject234 (PyPI)MAL-2026-7454 · Malicious code in cyberday26szymon-payments (PyPI)MAL-2026-7453 · Malicious code in cyberday26szymon-logging (PyPI)MAL-2026-7452 · Malicious code in cyberday26szymon-auth (PyPI)MAL-2026-7451 · Malicious code in vspropertypages (NuGet)MAL-2026-7450 · Malicious code in security_hacks (NuGet)MAL-2026-7449 · Malicious code in hackney.core.jwt (NuGet)MAL-2026-7448 · Malicious code in hackney.core.enums (NuGet)MAL-2026-10655 · Malicious code in @pimy-b2cweb/apiclient-b2cweb-r2 (npm)MAL-2026-10656 · Malicious code in @pimy-b2cweb/frontend-lib (npm)MAL-2026-6909 · Malicious code in express-firegate (npm)MAL-2026-5713 · Malicious code in vite-plugin-compress-js (npm)MAL-2026-5578 · Malicious code in webpack-cache-clean (npm)MAL-2026-5577 · Malicious code in web-pool (npm)MAL-2026-6457 · Malicious code in subsearch (npm)MAL-2026-6079 · Malicious code in set-proto-chain (npm)MAL-2026-5706 · Malicious code in theta-kit (npm)MAL-2026-5705 · Malicious code in theta-connector (npm)MAL-2026-5619 · Malicious code in tailwind-typography-plus (npm)MAL-2026-4781 · Malicious code in unique-id-64 (npm)MAL-2026-3775 · Malicious code in tsliverhome (npm)MAL-2026-3774 · Malicious code in ts-build-optimize (npm)MAL-2026-2883 · Malicious code in ts-lint-builds (npm)MAL-2026-2528 · Malicious code in sjs-lint-build1 (npm)MAL-2026-2527 · Malicious code in sjs-biginteger (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。