OpenSSF Malicious Packages · OSV format
MAL-2026-12808 · Malicious code in streak-metric-core (npm)MAL-2026-12807 · Malicious code in streak-grid-core (npm)MAL-2026-12806 · Malicious code in streak-core-bucket (npm)MAL-2026-12475 · Malicious code in tcb-web-copy-to-clipboard (npm)MAL-2026-12474 · Malicious code in taiga-ui-proprietary-navigation (npm)MAL-2026-12471 · Malicious code in streak-view-core (npm)MAL-2026-12469 · Malicious code in streak-math-lib (npm)MAL-2026-12468 · Malicious code in streak-math-kit (npm)MAL-2026-12467 · Malicious code in streak-int-lib (npm)MAL-2026-12466 · Malicious code in streak-daykit (npm)MAL-2026-12465 · Malicious code in streak-daykey-lib (npm)MAL-2026-12464 · Malicious code in streak-daybucket (npm)MAL-2026-12463 · Malicious code in streak-day-primitives (npm)MAL-2026-12461 · Malicious code in streak-daily-core (npm)MAL-2026-12460 · Malicious code in streak-count-core (npm)MAL-2026-12459 · Malicious code in streak-core-insights (npm)MAL-2026-12458 · Malicious code in streak-calendar-core (npm)MAL-2026-12310 · Malicious code in statist-browser-typed-client-sme.platform.web.teasers (npm)MAL-2026-12221 · Malicious code in tailwind-custom-forms (npm)MAL-2026-12214 · Malicious code in statist-browser-typed-client-sme.platform.web.productsnavigation.events (npm)MAL-2026-12074 · Malicious code in statist-browser-typed-client-nfs.grocery.mobile.events (npm)MAL-2026-12000 · Malicious code in streak-math-metrics (npm)MAL-2026-12785 · Malicious code in devplatform-spa-tokens (npm)MAL-2026-12779 · Malicious code in devplatform-spa-plugin-s3-module-loader (npm)MAL-2026-14500 · Malicious code in svelte-streak-map (npm)MAL-2026-14499 · Malicious code in svelte-map-metric (npm)MAL-2026-14495 · Malicious code in svelte-hydration-streak (npm)MAL-2026-14498 · Malicious code in svelte-intake-streaks (npm)MAL-2026-14494 · Malicious code in svelte-goal-streaks (npm)MAL-2026-14501 · Malicious code in svelte-streak-panel (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。