OpenSSF Malicious Packages · OSV format
MAL-2026-3126 · Malicious code in lsh (crates.io)MAL-2026-3129 · Malicious code in supertag (crates.io)MAL-2026-2949 · Malicious code in pathjoin (PyPI)MAL-2026-3127 · Malicious code in coloreasyprint (PyPI)MAL-2026-1575 · Malicious code in transform-typescript (npm)MAL-2026-1574 · Malicious code in transform-spread (npm)MAL-2026-1573 · Malicious code in transform-proto-to-assign (npm)MAL-2026-1572 · Malicious code in transform-new-target (npm)MAL-2026-1571 · Malicious code in transform-modules-systemjs (npm)MAL-2026-1570 · Malicious code in transform-member-expression-literals (npm)MAL-2026-1569 · Malicious code in transform-json-strings (npm)MAL-2026-1568 · Malicious code in transform-inline-consecutive-adds (npm)MAL-2026-1567 · Malicious code in transform-function-bind (npm)MAL-2026-1566 · Malicious code in transform-for-of (npm)MAL-2026-1565 · Malicious code in transform-export-extensions (npm)MAL-2026-1564 · Malicious code in transform-es2015-spread (npm)MAL-2026-1563 · Malicious code in transform-es2015-shorthand-properties (npm)MAL-2026-1562 · Malicious code in transform-es2015-parameters (npm)MAL-2026-1561 · Malicious code in transform-es2015-duplicate-keys (npm)MAL-2026-1560 · Malicious code in transform-dynamic-import (npm)MAL-2026-1559 · Malicious code in transform-charcodes (npm)MAL-2026-1558 · Malicious code in syntax-async-generators (npm)MAL-2026-1556 · Malicious code in yoshi-base (npm)MAL-2026-1555 · Malicious code in typescript-vue-apollo-smart-ops (npm)MAL-2026-1554 · Malicious code in typescript-validation-schema (npm)MAL-2026-1553 · Malicious code in typescript-react-query (npm)MAL-2026-1552 · Malicious code in typescript-nhost (npm)MAL-2026-1551 · Malicious code in syntax-function-bind (npm)MAL-2026-1550 · Malicious code in syntax-export-extensions (npm)MAL-2026-1549 · Malicious code in syntax-do-expressions (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。