OpenSSF Malicious Packages · OSV format
MAL-2026-5129 · Malicious code in @redhat-cloud-services/hcc-feo-mcp (npm)MAL-2026-5128 · Malicious code in @redhat-cloud-services/frontend-components-testing (npm)MAL-2026-5127 · Malicious code in @redhat-cloud-services/frontend-components-remediations (npm)MAL-2026-5125 · Malicious code in @redhat-cloud-services/entitlements-client (npm)MAL-2026-5118 · Malicious code in @redhat-cloud-services/topological-inventory-client (npm)MAL-2026-5117 · Malicious code in @redhat-cloud-services/rule-components (npm)MAL-2026-5116 · Malicious code in @redhat-cloud-services/rbac-client (npm)MAL-2026-5115 · Malicious code in @redhat-cloud-services/quickstarts-client (npm)MAL-2026-5114 · Malicious code in @redhat-cloud-services/frontend-components-config-utilities (npm)MAL-2026-5113 · Malicious code in @redhat-cloud-services/frontend-components (npm)MAL-2026-5112 · Malicious code in @redhat-cloud-services/eslint-config-redhat-cloud-services (npm)MAL-2026-5111 · Malicious code in @redhat-cloud-services/chrome (npm)MAL-2026-5132 · Malicious code in rookie-security-test-pkg (npm)MAL-2026-5123 · Malicious code in imgmatrix-analysis (PyPI)MAL-2026-5149 · Malicious code in align_rest_api (RubyGems)MAL-2026-4352 · Malicious code in xarc-webpack-cli (npm)MAL-2026-4657 · Malicious code in randomlogs (npm)MAL-2026-4836 · Malicious code in nemo-reporter (npm)MAL-2026-4615 · Malicious code in motion-tool (npm)MAL-2026-4590 · Malicious code in json-to-simple-graphql-schema (npm)MAL-2026-5122 · Malicious code in picnic-react-mise-en-place (npm)MAL-2026-5124 · Malicious code in @chat-template/auth (npm)MAL-2026-5121 · Malicious code in nepsnowplow (npm)MAL-2026-4600 · Malicious code in loading-session (npm)MAL-2026-5120 · Malicious code in redteam-qxz7-utils (PyPI)MAL-2026-4693 · Malicious code in to-cms (npm)MAL-2026-5097 · Malicious code in cms-storehub (npm)MAL-2026-4817 · Malicious code in chainix (npm)MAL-2026-4175 · Malicious code in collected-forms-embed-js (npm)MAL-2026-4487 · Malicious code in audit-logsss (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。