OpenSSF Malicious Packages · OSV format
MAL-2026-4183 · Malicious code in openclaw-agent (PyPI)MAL-2026-4654 · Malicious code in qazaq-cli (npm)MAL-2026-4528 · Malicious code in cloud-pc-templates (npm)MAL-2026-4643 · Malicious code in polymarket-clob-client (npm)MAL-2026-4165 · Malicious code in paysafe-gbp-virtual-terminal-lib-fe (npm)MAL-2026-4741 · Malicious code in aurafarmer (PyPI)MAL-2026-4764 · Malicious code in pycalendar-api (PyPI)MAL-2026-4769 · Malicious code in soundsource (PyPI)MAL-2026-4176 · Malicious code in dabrius-utils (PyPI)MAL-2026-4153 · Malicious code in size-sensor (npm)MAL-2026-4157 · Malicious code in uri-parse (npm)MAL-2026-4156 · Malicious code in timeago.js (npm)MAL-2026-4155 · Malicious code in timeago-react (npm)MAL-2026-3832 · Malicious code in zentra-finance (npm)MAL-2026-3828 · Malicious code in validate-api-key (npm)MAL-2026-3801 · Malicious code in the_secret_of_running_by_hans_van_dijk_ron_van_megen_02jsk (npm)MAL-2026-4152 · Malicious code in ribbon.js (npm)MAL-2026-4150 · Malicious code in react-adsense (npm)MAL-2026-3827 · Malicious code in string-manipulation-typescript (npm)MAL-2026-3826 · Malicious code in secure-env-loader (npm)MAL-2026-3825 · Malicious code in safe-env-reader (npm)MAL-2026-3793 · Malicious code in simple-date-diff-utils (npm)MAL-2026-4169 · Malicious code in paysafe-gbp-virtual-assistant-lib-fe (npm)MAL-2026-4147 · Malicious code in mcp-mermaid (npm)MAL-2026-4146 · Malicious code in mcp-echarts (npm)MAL-2026-3847 · Malicious code in openclaw-cn (npm)MAL-2026-3824 · Malicious code in parse-regex-string (npm)MAL-2026-3823 · Malicious code in parse-escape-regex-string (npm)MAL-2026-3792 · Malicious code in marathon-assets (npm)MAL-2026-4145 · Malicious code in lint-md-cli (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。