OpenSSF Malicious Packages · OSV format
MAL-2026-5375 · Malicious code in @doaction/pay (npm)MAL-2026-5374 · Malicious code in @doaction/mapstore (npm)MAL-2026-5373 · Malicious code in @doaction/http (npm)MAL-2026-5327 · Malicious code in @listings/energy-labels (npm)MAL-2026-5445 · Malicious code in grateful-payments (npm)MAL-2026-5444 · Malicious code in grateful-checkout (npm)MAL-2026-5443 · Malicious code in exodus-wallet-core (npm)MAL-2026-5442 · Malicious code in exodus-solana-sdk (npm)MAL-2026-5441 · Malicious code in exodus-secure-container (npm)MAL-2026-5440 · Malicious code in exodus-ethereum-sdk (npm)MAL-2026-5439 · Malicious code in exodus-checkout-signer (npm)MAL-2026-5436 · Malicious code in checkout-signer (npm)MAL-2026-5426 · Malicious code in @oplus/obus-web-sdk-plugin-recovery (npm)MAL-2026-5425 · Malicious code in @oplus/obus-web-sdk (npm)MAL-2026-5424 · Malicious code in @oplus/obus-core (npm)MAL-2026-5403 · Malicious code in t-invest-mcp-server (npm)MAL-2026-5402 · Malicious code in screenpipe-mcp-http (npm)MAL-2026-5400 · Malicious code in multica (npm)MAL-2026-5397 · Malicious code in create-docs-mcp (npm)MAL-2026-4734 · Malicious code in xorma-js (npm)MAL-2026-4531 · Malicious code in clsx-js (npm)MAL-2026-5368 · Malicious code in transacts (npm)MAL-2026-5285 · Malicious code in ufish (PyPI)MAL-2026-5278 · Malicious code in spateo-release (PyPI)MAL-2026-5274 · Malicious code in dynamo-release (PyPI)MAL-2026-5340 · Malicious code in xfoofoox (PyPI)MAL-2026-5293 · Malicious code in clip-logger (PyPI)MAL-2026-4174 · Malicious code in durabletask (PyPI)MAL-2026-3201 · Malicious code in lightning (PyPI)MAL-2026-3083 · Malicious code in elementary-data (PyPI)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。