OpenSSF Malicious Packages · OSV format
MAL-2026-2633 · Malicious code in markdownlint-rule-link-pattern (npm)MAL-2026-2632 · Malicious code in magentaa11y (npm)MAL-2026-2605 · Malicious code in kaltura-ngx-client (npm)MAL-2026-2567 · Malicious code in pt-sc-demo-app (npm)MAL-2026-2565 · Malicious code in portal-common-ui (npm)MAL-2026-2554 · Malicious code in paysafe-venmo (npm)MAL-2026-2553 · Malicious code in paysafe-payments-sdk-common (npm)MAL-2026-2552 · Malicious code in paysafe-google-pay (npm)MAL-2026-2551 · Malicious code in paysafe-card-payments (npm)MAL-2026-2550 · Malicious code in paysafe-apple-pay (npm)MAL-2026-3019 · Malicious code in hls.js (npm)MAL-2026-2995 · Malicious code in color-studio (npm)MAL-2026-2990 · Malicious code in etsyapp (npm)MAL-2026-2975 · Malicious code in crypto-keccak-js (npm)MAL-2026-2974 · Malicious code in claudcode-mcp (npm)MAL-2026-2973 · Malicious code in claudcode-cli (npm)MAL-2026-2951 · Malicious code in hifromhere1 (npm)MAL-2026-2925 · Malicious code in cktool.internal (npm)MAL-2026-2924 · Malicious code in cktool.core.internal (npm)MAL-2026-2923 · Malicious code in cktool.config (npm)MAL-2026-2922 · Malicious code in cktool.api (npm)MAL-2026-2921 · Malicious code in chandan-module-test (npm)MAL-2026-2900 · Malicious code in dotenv-pack (npm)MAL-2026-2895 · Malicious code in chai-as-optimized (npm)MAL-2026-2894 · Malicious code in chai-as-nobj (npm)MAL-2026-2776 · Malicious code in int-browsing-gateway (npm)MAL-2026-2775 · Malicious code in insomnia-smoke-test (npm)MAL-2026-2774 · Malicious code in insomnia-scripting-environment (npm)MAL-2026-2773 · Malicious code in insomnia-api (npm)MAL-2026-2772 · Malicious code in idaasfinancialnodeserv (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。