OpenSSF Malicious Packages · OSV format
MAL-2026-5189 · Malicious code in arjson (npm)MAL-2026-4500 · Malicious code in bricks-builder-mcp (npm)MAL-2026-4498 · Malicious code in bitrix24-tasks-mcp-server (npm)MAL-2026-4497 · Malicious code in bingocode (npm)MAL-2026-4444 · Malicious code in @shwfed/nuxt (npm)MAL-2024-1783 · Malicious code in auth0.net (npm)MAL-2026-5685 · Malicious code in @malwguy/ecto-corsair-whisper-3d2a7c (npm)MAL-2026-4394 · Malicious code in @ikyyofc/gemini-cli (npm)MAL-2026-5702 · Malicious code in flexitest (PyPI)MAL-2026-4728 · Malicious code in web-dotenv (npm)MAL-2026-5684 · Malicious code in jec (PyPI)MAL-2026-5681 · Malicious code in trongap (PyPI)MAL-2026-5674 · Malicious code in @johntaohunter/forge-jsx (npm)MAL-2026-5538 · Malicious code in hex-type (npm)MAL-2026-3215 · Malicious code in archetype-style (npm)MAL-2026-5653 · Malicious code in pc-optimizer (npm)MAL-2026-5673 · Malicious code in zatzdbai (npm)MAL-2026-5661 · Malicious code in @sazka/web (npm)MAL-2026-5659 · Malicious code in @ngt-frontend/widgets-core (npm)MAL-2026-5656 · Malicious code in @integrations-center/utils (npm)MAL-2026-5660 · Malicious code in @ntnx/nx-react-components (npm)MAL-2026-5669 · Malicious code in mm-ts-utils-client (npm)MAL-2026-5657 · Malicious code in @iobeya/spa-auth (npm)MAL-2026-5654 · Malicious code in @coterie-baby/common (npm)MAL-2026-5458 · Malicious code in ultimate-ai-power (PyPI)MAL-2026-5641 · Malicious code in goreleaser-run (npm)MAL-2026-5622 · Malicious code in @whatnot-web/www-legacy (npm)MAL-2026-4860 · Malicious code in @qlab/ui (npm)MAL-2026-5650 · Malicious code in ozone-sdk (npm)MAL-2026-5639 · Malicious code in @tt-aem-tt4a/shared-components (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。