OpenSSF Malicious Packages · OSV format
MAL-2026-4545 · Malicious code in cwao-tools (npm)MAL-2026-4544 · Malicious code in cwao (npm)MAL-2026-4538 · Malicious code in create-arnext-app (npm)MAL-2026-4486 · Malicious code in atomic-notes (npm)MAL-2026-4483 · Malicious code in arnext-arkb (npm)MAL-2026-4482 · Malicious code in arnext (npm)MAL-2026-4480 · Malicious code in aonote (npm)MAL-2026-4476 · Malicious code in ai3 (npm)MAL-2026-5194 · Malicious code in yaml-javascript (npm)MAL-2026-5193 · Malicious code in javascript-yaml (npm)MAL-2026-5191 · Malicious code in wdb-core (npm)MAL-2026-5184 · Malicious code in sf-silly-goose-requests (PyPI)MAL-2026-5183 · Malicious code in hpe-glcp-automation-lib (PyPI)MAL-2026-5180 · Malicious code in nodemon-webpatch (npm)MAL-2026-5179 · Malicious code in chai-midpatch (npm)MAL-2026-5181 · Malicious code in tronlabpy3 (PyPI)MAL-2026-5177 · Malicious code in fia-signals (PyPI)MAL-2026-5178 · Malicious code in tronlab (PyPI)MAL-2026-5176 · Malicious code in internal-tracker (PyPI)MAL-2026-5175 · Malicious code in webpack-json (npm)MAL-2026-5174 · Malicious code in nodemon-pack (npm)MAL-2026-5182 · Malicious code in brave-search-mcp-server (npm)MAL-2026-5167 · Malicious code in jules-test-utils (PyPI)MAL-2026-5168 · Malicious code in vg-interaction-model (npm)MAL-2026-3434 · Malicious code in @opensearch-project/opensearch (npm)MAL-2026-5169 · Malicious code in chai-parse (npm)MAL-2026-5152 · Malicious code in quant-backtest-helpers (PyPI)MAL-2026-5151 · Malicious code in parsimonius (PyPI)MAL-2026-5131 · Malicious code in @redhat-cloud-services/sources-client (npm)MAL-2026-5130 · Malicious code in @redhat-cloud-services/integrations-client (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。