OpenSSF Malicious Packages · OSV format
MAL-2026-3328 · Malicious code in pocpoc2626 (npm)MAL-2026-3313 · Malicious code in service-gateway (npm)MAL-2026-3282 · Malicious code in shopify-draggable (npm)MAL-2026-3281 · Malicious code in pos-next-react-native (npm)MAL-2026-3280 · Malicious code in pi-exa-mcp (npm)MAL-2026-3262 · Malicious code in react-native-parallax-scroll-view-updated (npm)MAL-2026-3026 · Malicious code in sagat-core (npm)MAL-2026-3421 · Malicious code in oneblk-design-system (npm)MAL-2026-3419 · Malicious code in msal-browser-1p (npm)MAL-2026-3409 · Malicious code in mw-filesystem-events-nodream (npm)MAL-2026-3399 · Malicious code in money-badger-open-rpc-test-bugbount (npm)MAL-2026-3373 · Malicious code in owa-analytics-utils (npm)MAL-2026-3338 · Malicious code in ms.analytics-web (npm)MAL-2026-3322 · Malicious code in microsoft-agents-auth-service (npm)MAL-2026-3279 · Malicious code in muenxo (npm)MAL-2026-3025 · Malicious code in next-rwa (npm)MAL-2026-3331 · Malicious code in lazyhtml-scripts (npm)MAL-2026-3310 · Malicious code in gweb-build-system (npm)MAL-2026-3278 · Malicious code in honcho-theme (npm)MAL-2026-3261 · Malicious code in internal-auth-provider (npm)MAL-2026-3260 · Malicious code in google-storage-cloud (npm)MAL-2026-3504 · Malicious code in git-git-git (npm)MAL-2026-3503 · Malicious code in git-branch-selector (npm)MAL-2026-3502 · Malicious code in cross-stitch (npm)MAL-2026-3430 · Malicious code in cplace-bmw-emt-mvp (npm)MAL-2026-3418 · Malicious code in devsite-youtube (npm)MAL-2026-3417 · Malicious code in connect-perspectives-admintool (npm)MAL-2026-3395 · Malicious code in coral-dev-proxy (npm)MAL-2026-3346 · Malicious code in generator-go-circleci (npm)MAL-2026-3345 · Malicious code in deployment-core (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。