OpenSSF Malicious Packages · OSV format
MAL-2026-2829 · Malicious code in paddle-internal-scripts (npm)MAL-2026-2817 · Malicious code in lightweight-charts-4.1 (npm)MAL-2026-2797 · Malicious code in relion-node (npm)MAL-2026-2796 · Malicious code in relion-chain (npm)MAL-2026-2795 · Malicious code in react-appfabric-shell (npm)MAL-2026-2794 · Malicious code in puzzle-fragment (npm)MAL-2026-2793 · Malicious code in pil2-stark-js (npm)MAL-2026-2792 · Malicious code in pil2-proofman-js (npm)MAL-2026-2791 · Malicious code in payments-ui (npm)MAL-2026-2790 · Malicious code in package-with-import-assertions (npm)MAL-2026-2789 · Malicious code in otomi-tasks (npm)MAL-2026-2788 · Malicious code in otomi-console (npm)MAL-2026-2787 · Malicious code in node-syncora (npm)MAL-2026-2786 · Malicious code in node-metrica (npm)MAL-2026-2784 · Malicious code in nemo-datadrive (npm)MAL-2026-2783 · Malicious code in mypeopledoc (npm)MAL-2026-2782 · Malicious code in mybibilabu (npm)MAL-2026-2781 · Malicious code in minecraft_image_to_blocks (npm)MAL-2026-2780 · Malicious code in metrify-node (npm)MAL-2026-2779 · Malicious code in metrify-chain (npm)MAL-2026-2778 · Malicious code in marketing-analytics (npm)MAL-2026-2777 · Malicious code in linode-developers (npm)MAL-2026-2685 · Malicious code in react-dom-19 (npm)MAL-2026-2677 · Malicious code in pdf-linker (npm)MAL-2026-2676 · Malicious code in moscova-plural-json-parser (npm)MAL-2026-2675 · Malicious code in mongoose-stamps (npm)MAL-2026-2668 · Malicious code in pnpm-workspaces (npm)MAL-2026-2644 · Malicious code in node-unpnotifyserv (npm)MAL-2026-2635 · Malicious code in pubnub-element (npm)MAL-2026-2634 · Malicious code in percy-cake-docker (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。