OpenSSF Malicious Packages · OSV format
MAL-2026-1548 · Malicious code in syntax-class-constructor-call (npm)MAL-2026-1541 · Malicious code in urql-introspection (npm)MAL-2026-1540 · Malicious code in typescript-type-graphql (npm)MAL-2026-1538 · Malicious code in vue-scoped-css (npm)MAL-2026-1537 · Malicious code in typescript-rtk-query (npm)MAL-2026-1536 · Malicious code in typescript-resolvers (npm)MAL-2026-1535 · Malicious code in transform-dev-warning (npm)MAL-2026-1534 · Malicious code in transform-dev (npm)MAL-2026-1533 · Malicious code in todo-plz (npm)MAL-2026-1532 · Malicious code in syntax-exponentiation-operator (npm)MAL-2026-1531 · Malicious code in syntax-decorators (npm)MAL-2026-1530 · Malicious code in styled-components-a11y (npm)MAL-2026-1513 · Malicious code in vitest-globals (npm)MAL-2026-1512 · Malicious code in undeclared-variables-check (npm)MAL-2026-1511 · Malicious code in transform-undefined-to-void (npm)MAL-2026-1510 · Malicious code in transform-simplify-comparison-operators (npm)MAL-2026-1509 · Malicious code in transform-remove-debugger (npm)MAL-2026-1508 · Malicious code in transform-react-jsx (npm)MAL-2026-1507 · Malicious code in transform-property-literals (npm)MAL-2026-1506 · Malicious code in transform-minify-booleans (npm)MAL-2026-1505 · Malicious code in transform-jscript (npm)MAL-2026-1504 · Malicious code in transform-jsbi-to-bigint (npm)MAL-2026-1337 · Malicious code in typescript-urql (npm)MAL-2026-1334 · Malicious code in sort-export-all (npm)MAL-2026-1547 · Malicious code in pear-wrk-wdk (npm)MAL-2026-1539 · Malicious code in relay-optimizer-plugin (npm)MAL-2026-1529 · Malicious code in require-in-package (npm)MAL-2026-1528 · Malicious code in react-you-might-not-need-an-effect (npm)MAL-2026-1527 · Malicious code in proposal-typescript (npm)MAL-2026-1526 · Malicious code in prefer-let (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。