OpenSSF Malicious Packages · OSV format
MAL-2026-3817 · Malicious code in apex-trading (npm)MAL-2026-3816 · Malicious code in apex-connector (npm)MAL-2026-3815 · Malicious code in @zentrafinance/types (npm)MAL-2026-3814 · Malicious code in @zentrafinance/sdk (npm)MAL-2026-3813 · Malicious code in @zentrafinance/protocol-config (npm)MAL-2026-3811 · Malicious code in claude-code-base-action (npm)MAL-2026-3804 · Malicious code in bui-react-10components (npm)MAL-2026-3786 · Malicious code in browser-interaction-time-utils (npm)MAL-2026-3785 · Malicious code in browser-interaction-time-demo (npm)MAL-2026-3784 · Malicious code in babel-6-compatibility-utils (npm)MAL-2026-3783 · Malicious code in babel-6-compatibility (npm)MAL-2026-3782 · Malicious code in atlassian-marathon-asset-pipeline (npm)MAL-2026-3781 · Malicious code in atlassian-jenkins-helper-utils (npm)MAL-2026-3779 · Malicious code in alicloud-pop-core (npm)MAL-2026-4161 · Malicious code in @cap-js/openapi (npm)MAL-2026-4160 · Malicious code in @apps-home-dashboard/events (npm)MAL-2026-4122 · Malicious code in @antv/xflow-hook (npm)MAL-2026-4121 · Malicious code in @antv/xflow-extension (npm)MAL-2026-4120 · Malicious code in @antv/xflow-diff (npm)MAL-2026-4119 · Malicious code in @antv/xflow-core (npm)MAL-2026-4117 · Malicious code in @antv/x6-vue3-shape (npm)MAL-2026-4115 · Malicious code in @antv/x6-vector (npm)MAL-2026-4114 · Malicious code in @antv/x6-react-shape (npm)MAL-2026-4112 · Malicious code in @antv/x6-react (npm)MAL-2026-4106 · Malicious code in @antv/x6-plugin-minimap (npm)MAL-2026-4105 · Malicious code in @antv/x6-plugin-keyboard (npm)MAL-2026-4103 · Malicious code in @antv/x6-plugin-export (npm)MAL-2026-4101 · Malicious code in @antv/x6-plugin-clipboard (npm)MAL-2026-4100 · Malicious code in @antv/x6-components (npm)MAL-2026-4098 · Malicious code in @antv/x6-angular-shape (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。