OpenSSF Malicious Packages · OSV format
MAL-2026-14266 · Malicious code in electron-sessions (npm)MAL-2026-14263 · Malicious code in arb-kit (npm)MAL-2026-14261 · Malicious code in postcss-initialize-provider (npm)MAL-2026-12422 · Malicious code in quorvex (npm)MAL-2026-14262 · Malicious code in pump-fun-skills (npm)MAL-2026-14257 · Malicious code in modsync (npm)MAL-2026-14256 · Malicious code in api-rs-tuils (npm)MAL-2026-14259 · Malicious code in ranux-dev (npm)MAL-2026-14258 · Malicious code in ranux-cloud (npm)MAL-2026-14260 · Malicious code in ranux-pro (npm)MAL-2026-14255 · Malicious code in secp256k1-lib (npm)MAL-2026-14252 · Malicious code in npm-wold (npm)MAL-2026-14253 · Malicious code in react-dom-helpers (npm)MAL-2026-14254 · Malicious code in saaa9 (npm)MAL-2026-14249 · Malicious code in localize-extract (npm)MAL-2026-14250 · Malicious code in luluking1 (npm)MAL-2026-14246 · Malicious code in hardhat-hold (npm)MAL-2026-14242 · Malicious code in electro-session (npm)MAL-2026-12359 · Malicious code in crypto-javas (npm)MAL-2026-12358 · Malicious code in croft-node (npm)MAL-2026-10586 · Malicious code in crypto-validate-lib (npm)MAL-2026-14251 · Malicious code in ngsw-config (npm)MAL-2026-14248 · Malicious code in nice-utils-helper (npm)MAL-2026-14243 · Malicious code in flydev (npm)MAL-2026-14241 · Malicious code in dxrs-dos (npm)MAL-2026-14240 · Malicious code in dxr-dos (npm)MAL-2026-14247 · Malicious code in magika-js (npm)MAL-2026-14245 · Malicious code in github-policy-bot (npm)MAL-2026-10669 · Malicious code in dbconnectify (npm)MAL-2026-14225 · Malicious code in ambera (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。