OpenSSF Malicious Packages · OSV format
MAL-2026-6070 · Malicious code in libsc-runtime-telemetry (npm)MAL-2026-6065 · Malicious code in lab-services (npm)MAL-2026-5902 · Malicious code in chai-as-tokenized (npm)MAL-2026-4348 · Malicious code in api-rs-node (npm)MAL-2026-6058 · Malicious code in @ignacionunez91/keccak24 (npm)MAL-2026-6060 · Malicious code in qrcode-express (npm)MAL-2026-6064 · Malicious code in tailwindcss-animates-css (npm)MAL-2026-6061 · Malicious code in qrcode-generator-node (npm)MAL-2026-6059 · Malicious code in express-validates (npm)MAL-2026-6181 · Malicious code in virtualization-compression-collapse (npm)MAL-2026-6180 · Malicious code in userinterface-machinelearning (npm)MAL-2026-6179 · Malicious code in touchid-images (npm)MAL-2026-6178 · Malicious code in streaming-downloads (npm)MAL-2026-6177 · Malicious code in socket-network (npm)MAL-2026-6176 · Malicious code in request-tracking-sqlite (npm)MAL-2026-6175 · Malicious code in request-performance (npm)MAL-2026-6174 · Malicious code in pushnotifications-gesturerecognition (npm)MAL-2026-6173 · Malicious code in profiling-keychain (npm)MAL-2026-6172 · Malicious code in platformspecific-webgl (npm)MAL-2026-6171 · Malicious code in personal-custom-button (npm)MAL-2026-6170 · Malicious code in onesignal-hooks (npm)MAL-2026-6169 · Malicious code in notificationcenter-enzyme-jest (npm)MAL-2026-6168 · Malicious code in macos-contentprovider-optimizingassets (npm)MAL-2026-6167 · Malicious code in lazyloading-haptics (npm)MAL-2026-6166 · Malicious code in jest-macos (npm)MAL-2026-6165 · Malicious code in ios-save-area-custom (npm)MAL-2026-6164 · Malicious code in interaction-photos-infinitescroll (npm)MAL-2026-6163 · Malicious code in framerate-interaction-permissions (npm)MAL-2026-6162 · Malicious code in font-picker-responsive (npm)MAL-2026-6161 · Malicious code in flexbox-oauth-machinelearning (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。