OpenSSF Malicious Packages · OSV format
MAL-2026-4218 · Malicious code in solidity-deploy-guard (npm)MAL-2026-4198 · Malicious code in terminal-logger-utils (npm)MAL-2026-4193 · Malicious code in private-next-pages (npm)MAL-2026-4184 · Malicious code in stripe-internal-utils (npm)MAL-2026-4629 · Malicious code in openmct-couch-plugin (npm)MAL-2026-4623 · Malicious code in npm-builderio-qwik-poc (npm)MAL-2026-4614 · Malicious code in moneykit-cardano-demo (npm)MAL-2026-4587 · Malicious code in intl-ads (npm)MAL-2026-4586 · Malicious code in intl-ad-routing (npm)MAL-2026-4583 · Malicious code in ignite-market-contractstest (npm)MAL-2026-4346 · Malicious code in logger-draft (npm)MAL-2026-4280 · Malicious code in node-setup-helpers (npm)MAL-2026-4279 · Malicious code in model-switch-router (npm)MAL-2026-4278 · Malicious code in llm-context-compressor (npm)MAL-2026-4208 · Malicious code in mnemonic-safety-check (npm)MAL-2026-4192 · Malicious code in iv-stubborn (npm)MAL-2026-4577 · Malicious code in harness-skil (npm)MAL-2026-4573 · Malicious code in git-userhub (npm)MAL-2026-4568 · Malicious code in fulcrum-sessions (npm)MAL-2026-4567 · Malicious code in freertc (npm)MAL-2026-4551 · Malicious code in encrata-cli (npm)MAL-2026-4549 · Malicious code in dot-utils-plus (npm)MAL-2026-4537 · Malicious code in cosmosdb-server (npm)MAL-2026-4535 · Malicious code in configcat-trello-powerup (npm)MAL-2026-4532 · Malicious code in code-tool-langfuse (npm)MAL-2026-4530 · Malicious code in cloudsmith-vsc (npm)MAL-2026-4529 · Malicious code in cloudpivot (npm)MAL-2026-4522 · Malicious code in claude-all-config (npm)MAL-2026-4520 · Malicious code in class-blend (npm)MAL-2026-4350 · Malicious code in clobprice.api (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。