OpenSSF Malicious Packages · OSV format
MAL-2026-3199 · Malicious code in blackbeards-navigator (npm)MAL-2026-3179 · Malicious code in mbt (npm)MAL-2026-3178 · Malicious code in @cap-js/sqlite (npm)MAL-2026-3177 · Malicious code in @cap-js/postgres (npm)MAL-2026-3176 · Malicious code in @cap-js/db-service (npm)MAL-2026-3125 · Malicious code in transform-regexp-constructors (npm)MAL-2026-3196 · Malicious code in react-dnd-14 (npm)MAL-2026-3190 · Malicious code in tanstack (npm)MAL-2026-3051 · Malicious code in shopify-app-extension-template (npm)MAL-2026-3204 · Malicious code in intercom-client (npm)MAL-2026-3032 · Malicious code in js-component-explorer (npm)MAL-2026-3173 · Malicious code in gcp-internal-research-poc (npm)MAL-2026-3171 · Malicious code in frank-newton3-final-audit (npm)MAL-2026-3170 · Malicious code in frank-newton3-db-poc (npm)MAL-2026-3169 · Malicious code in frank-newton3-db-final (npm)MAL-2026-3147 · Malicious code in coinmate-typescript-client (npm)MAL-2026-3049 · Malicious code in classlink (npm)MAL-2026-3166 · Malicious code in apple-infra-escape-audit (npm)MAL-2026-3123 · Malicious code in apple-app-store-server-library-poc (npm)MAL-2026-3060 · Malicious code in @frengki0707/google-cloud-clone (npm)MAL-2026-3203 · Malicious code in buffparser (PyPI)MAL-2026-3175 · Malicious code in bbranger (PyPI)MAL-2026-2896 · Malicious code in chai-as-stream (npm)MAL-2026-2890 · Malicious code in chai-as-ide (npm)MAL-2026-3148 · Malicious code in amazon-boto (PyPI)MAL-2026-3141 · Malicious code in coinmate-api (PyPI)MAL-2026-3100 · Malicious code in fetch-data-api-syncapi (PyPI)MAL-2026-3133 · Malicious code in fetchapi-syncdata-pypi (PyPI)MAL-2026-3131 · Malicious code in kcvlib (PyPI)MAL-2026-3130 · Malicious code in genmedia-izumi-agent (PyPI)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。