OpenSSF Malicious Packages · OSV format
MAL-2026-17476 · Malicious code in css-anchor-pos-fallback (npm)MAL-2026-17475 · Malicious code in css-a11y-contrast-utils (npm)MAL-2026-17491 · Malicious code in focus-visible-polyfill-lite (npm)MAL-2026-17468 · Malicious code in voxcpmintel (PyPI)MAL-2026-17465 · Malicious code in voxcpmeval (PyPI)MAL-2026-17466 · Malicious code in voxcpmkit (PyPI)MAL-2026-17467 · Malicious code in voxcpmui4 (PyPI)MAL-2026-16440 · Malicious code in turbo-ws (npm)MAL-2026-17308 · Malicious code in mfahelper (npm)MAL-2026-16350 · Malicious code in bnppf-flag-icons (npm)MAL-2026-16354 · Malicious code in @woodpecker-web-shared/components (npm)MAL-2026-17234 · Malicious code in hardhat-zet (npm)MAL-2026-17460 · Malicious code in ui.dist.min.js (npm)MAL-2026-17459 · Malicious code in ui-base-colors (npm)MAL-2026-17419 · Malicious code in friendly-tools (PyPI)MAL-2026-17426 · Malicious code in kartykgithub-ph-f (npm)MAL-2026-17425 · Malicious code in kartykgithub-ph-e (npm)MAL-2026-17424 · Malicious code in kartykgithub-ph-b (npm)MAL-2026-17454 · Malicious code in gogets.dev/btreex (Go)MAL-2026-17453 · Malicious code in gocommunity.io/orderedbtree (Go)MAL-2026-16333 · Malicious code in homestack-cheer (npm)MAL-2026-17451 · Malicious code in wailib (npm)MAL-2026-17447 · Malicious code in mikuhostt-baileys (npm)MAL-2026-17444 · Malicious code in danz-bails (npm)MAL-2026-17440 · Malicious code in @erlanzz/baileys (npm)MAL-2026-17423 · Malicious code in illusion-datalab (npm)MAL-2026-17294 · Malicious code in react-nodejs (npm)MAL-2026-17245 · Malicious code in exptrdd (npm)MAL-2026-17324 · Malicious code in dotenv-preflight (npm)MAL-2026-17306 · Malicious code in fabric-loader-core (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。