OpenSSF Malicious Packages · OSV format
MAL-2026-12365 · Malicious code in dolyame-boxy-independent-bnpl-info-images (npm)MAL-2026-12364 · Malicious code in dolyame-boxy-atom-bnpl-store-button (npm)MAL-2026-12362 · Malicious code in digital-interview-digital-interview-core (npm)MAL-2026-6540 · Malicious code in db-rake (npm)MAL-2026-6539 · Malicious code in db-query-log (npm)MAL-2026-12747 · Malicious code in devplatform-s3-client (npm)MAL-2026-10631 · Malicious code in core-dotenv (npm)MAL-2026-14340 · Malicious code in tinymember (crates.io)MAL-2026-14339 · Malicious code in proc_macro_en (crates.io)MAL-2026-14338 · Malicious code in proc_macro1 (crates.io)MAL-2026-14337 · Malicious code in internment (crates.io)MAL-2026-14336 · Malicious code in arrayref (crates.io)MAL-2026-14335 · Malicious code in aronenao (crates.io)MAL-2026-14334 · Malicious code in arone (crates.io)MAL-2026-14333 · Malicious code in append_only_vec (crates.io)MAL-2026-14332 · Malicious code in aovine (crates.io)MAL-2026-14306 · Malicious code in rc4-secure (PyPI)MAL-2026-14307 · Malicious code in express-route-engine (npm)MAL-2026-14304 · Malicious code in base99-85x (npm)MAL-2026-14303 · Malicious code in x6842179305 (npm)MAL-2026-14314 · Malicious code in webpack-cdn-fetcher (npm)MAL-2026-14312 · Malicious code in griffin-transliterator (npm)MAL-2026-14311 · Malicious code in eslint-config-consumerweb (npm)MAL-2026-14309 · Malicious code in @idanefraim/my-ui-kit (npm)MAL-2026-14300 · Malicious code in eth-react-provider (npm)MAL-2026-14298 · Malicious code in emoji-prints-fancy (npm)MAL-2026-14299 · Malicious code in gear-composer (npm)MAL-2026-13392 · Malicious code in golaaa (npm)MAL-2026-10462 · Malicious code in hehehee (npm)MAL-2026-14296 · Malicious code in gfff5 (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。