OpenSSF Malicious Packages · OSV format
MAL-2026-2656 · Malicious code in tailwind-stylecss-typography (npm)MAL-2026-2655 · Malicious code in tailwind-lines-clamp (npm)MAL-2026-2636 · Malicious code in seaport-core-16 (npm)MAL-2026-2629 · Malicious code in stacks-editor (npm)MAL-2026-2622 · Malicious code in wm-plugin-wm-smart-tip-dont-embed-tooltip (npm)MAL-2026-2621 · Malicious code in walmart-internal (npm)MAL-2026-2620 · Malicious code in upstartportal (npm)MAL-2026-2619 · Malicious code in upstartloans (npm)MAL-2026-2618 · Malicious code in upstartdr (npm)MAL-2026-2617 · Malicious code in upstartautoretailadmin (npm)MAL-2026-2616 · Malicious code in upstartapplicationstatus (npm)MAL-2026-2615 · Malicious code in upstartadmindashboard- (npm)MAL-2026-2614 · Malicious code in upstart.previewcss (npm)MAL-2026-2613 · Malicious code in upstart-offer-container (npm)MAL-2026-2612 · Malicious code in upstart-loan-status (npm)MAL-2026-2611 · Malicious code in upstart-lending-status (npm)MAL-2026-2610 · Malicious code in twilio-video.js (npm)MAL-2026-2609 · Malicious code in trade-in-lib (npm)MAL-2026-2607 · Malicious code in stats-api-js-client (npm)MAL-2026-2566 · Malicious code in wm-plugin-visions-recorder (npm)MAL-2026-3021 · Malicious code in lightspark-js (npm)MAL-2026-2991 · Malicious code in pgserve (npm)MAL-2026-2955 · Malicious code in megabank-worklist (npm)MAL-2026-2940 · Malicious code in mailcraftjs (npm)MAL-2026-2939 · Malicious code in krdfonts (npm)MAL-2026-2928 · Malicious code in pa-marked-internal (npm)MAL-2026-2927 · Malicious code in pa-marked (npm)MAL-2026-2853 · Malicious code in react-hook-form (npm)MAL-2026-2845 · Malicious code in node-red-contrib-yolo-object-detection (npm)MAL-2026-2838 · Malicious code in koa-v3 (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。