OpenSSF Malicious Packages · OSV format
MAL-2026-4144 · Malicious code in lint-md (npm)MAL-2026-4142 · Malicious code in jest-url-loader (npm)MAL-2026-4141 · Malicious code in jest-random-mock (npm)MAL-2026-4139 · Malicious code in jest-expect (npm)MAL-2026-4138 · Malicious code in jest-electron (npm)MAL-2026-4136 · Malicious code in jest-canvas-mock (npm)MAL-2026-3791 · Malicious code in json-pretty-logs (npm)MAL-2026-3790 · Malicious code in jenkins-forge-utils (npm)MAL-2026-3789 · Malicious code in jenkins-forge-app (npm)MAL-2026-4135 · Malicious code in gantt-for-react (npm)MAL-2026-4133 · Malicious code in filesize.js (npm)MAL-2026-4132 · Malicious code in echarts-for-react (npm)MAL-2026-3800 · Malicious code in dowload_ebok_the_upside_of_unrequited_by_becky_albertalli_2jgmw (npm)MAL-2026-3799 · Malicious code in dowload_ebok_the_testament_of_solomon_by_king_solomon_frederick_cornwallis_conybeare_5201c (npm)MAL-2026-3798 · Malicious code in dowload_ebok_terra_incognita_urania_by_ian_mcdonald_um4vu (npm)MAL-2026-3797 · Malicious code in dowload_ebok_stalking_jack_the_ripper_by_kerri_maniscalco_james_patterson_b529t (npm)MAL-2026-3796 · Malicious code in dowload_ebok_los_enemigos_del_comercio_by_antonio_escohotado_6t2l4 (npm)MAL-2026-3795 · Malicious code in dowload_ebok_como_leer_el_futbol_by_ruud_gullit_8qd97 (npm)MAL-2026-3794 · Malicious code in dowload_ebok_also_an_octopus_by_maggie_tokuda_hall_ah2ip (npm)MAL-2026-4167 · Malicious code in chai-as-attracted (npm)MAL-2026-4130 · Malicious code in boring-avatars-vanilla (npm)MAL-2026-4129 · Malicious code in babel-plugin-version (npm)MAL-2026-4127 · Malicious code in amapcn (npm)MAL-2026-4126 · Malicious code in ai-figure (npm)MAL-2026-3846 · Malicious code in byte-parser (npm)MAL-2026-3831 · Malicious code in citrea-utils (npm)MAL-2026-3830 · Malicious code in @zentrafinance/contracts (npm)MAL-2026-3822 · Malicious code in clementine-sdk (npm)MAL-2026-3821 · Malicious code in citrea-sdk (npm)MAL-2026-3820 · Malicious code in citrea-bridge (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。