OpenSSF Malicious Packages · OSV format
MAL-2026-6140 · Malicious code in @httpactions/strict-uri-encode (npm)MAL-2026-6138 · Malicious code in randpicker (PyPI)MAL-2026-6133 · Malicious code in panrouter (npm)MAL-2026-6132 · Malicious code in metavu (npm)MAL-2026-4493 · Malicious code in axiosqqq (npm)MAL-2026-6127 · Malicious code in @onum-releases/utils (npm)MAL-2026-6126 · Malicious code in @onum-releases/shared-components (npm)MAL-2026-6125 · Malicious code in @onum-releases/sdk (npm)MAL-2026-6124 · Malicious code in @onum-releases/ixel (npm)MAL-2026-6123 · Malicious code in @onum-releases/auth (npm)MAL-2026-6122 · Malicious code in @onum-releases/api-client (npm)MAL-2026-6137 · Malicious code in react-error-lint (npm)MAL-2026-6134 · Malicious code in panrouter-admin (npm)MAL-2026-6120 · Malicious code in @caspianph/storyteller (npm)MAL-2026-6131 · Malicious code in computerrock-babel-preset-react-app (npm)MAL-2026-5643 · Malicious code in parket-slot (npm)MAL-2026-6118 · Malicious code in final-poc-usa (RubyGems)MAL-2026-5910 · Malicious code in uidai_reusable_components (npm)MAL-2026-6117 · Malicious code in final-shoaib (RubyGems)MAL-2026-6101 · Malicious code in type-check-816d (npm)MAL-2026-6100 · Malicious code in string-tools-be6c (npm)MAL-2026-5992 · Malicious code in runtime-metrics-w7k2 (npm)MAL-2026-5990 · Malicious code in pkg-telemetry-r4f9 (npm)MAL-2026-5986 · Malicious code in npm-sandbox-ping-r9t2 (npm)MAL-2026-5763 · Malicious code in npm-sandbox-research-g3h4 (npm)MAL-2026-5762 · Malicious code in npm-sandbox-research-e9f0 (npm)MAL-2026-5761 · Malicious code in npm-sandbox-research-d7e8 (npm)MAL-2026-5760 · Malicious code in npm-sandbox-research-c5d6 (npm)MAL-2026-5759 · Malicious code in npm-sandbox-research-9c4e (npm)MAL-2026-5758 · Malicious code in npm-sandbox-research-8b2f (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。