OpenSSF Malicious Packages · OSV format
MAL-2026-12390 · Malicious code in hubert-document-actual-insurance-rules-am (npm)MAL-2026-12066 · Malicious code in hubert-appointment-v2-task-create-am (npm)MAL-2026-4570 · Malicious code in gehneb (npm)MAL-2026-11204 · Malicious code in nano-perf (npm)MAL-2026-5838 · Malicious code in tn-advertisement (npm)MAL-2026-14308 · Malicious code in libasync (PyPI)MAL-2026-6716 · Malicious code in test-pkg-pnpm (npm)MAL-2026-14313 · Malicious code in node-runtime-utils (npm)MAL-2026-5611 · Malicious code in datetime-toolkit (npm)MAL-2026-14302 · Malicious code in ai-texts-utils (npm)MAL-2026-14217 · Malicious code in ai-texts (npm)MAL-2026-14315 · Malicious code in @httttt/mcp-demo (npm)MAL-2026-14316 · Malicious code in expect-dotenv (npm)MAL-2026-14310 · Malicious code in bunnyhijack-test-0x00 (npm)MAL-2026-6718 · Malicious code in test-pkg-yarn (npm)MAL-2026-6717 · Malicious code in test-pkg-x0 (npm)MAL-2026-6568 · Malicious code in express-mocha-test (npm)MAL-2026-6374 · Malicious code in evil-pkg (npm)MAL-2026-4561 · Malicious code in fe-utils-core (npm)MAL-2026-4556 · Malicious code in express-enrouten-async (npm)MAL-2026-12382 · Malicious code in finance-business-company-id-models (npm)MAL-2026-12380 · Malicious code in fb-forms-form-boilerplate-contacts (npm)MAL-2026-12178 · Malicious code in fb-cards-form-no-resident-information (npm)MAL-2026-10501 · Malicious code in filewisee (npm)MAL-2026-10435 · Malicious code in fetchcraft (npm)MAL-2026-10414 · Malicious code in express-request-engine (npm)MAL-2026-6567 · Malicious code in eslint-commit-parser (npm)MAL-2026-4550 · Malicious code in emojifancy-print (npm)MAL-2026-12784 · Malicious code in devplatform-spa-testing (npm)MAL-2026-12367 · Malicious code in dolyame-ui-form (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。