OpenSSF Malicious Packages · OSV format
MAL-2026-2938 · Malicious code in bignum-ts-v2 (npm)MAL-2026-2937 · Malicious code in @tushar-br/file11 (npm)MAL-2026-2936 · Malicious code in @tushar-br/editing-pack (npm)MAL-2026-2935 · Malicious code in @tushar-br/desktop (npm)MAL-2026-2934 · Malicious code in @otaxayuns/baileys (npm)MAL-2026-2933 · Malicious code in @kjma/mailcraft (npm)MAL-2026-2919 · Malicious code in apple-idms-internal (npm)MAL-2026-2918 · Malicious code in apple-cloudkit-internal (npm)MAL-2026-2917 · Malicious code in ac-sasskit-internal (npm)MAL-2026-2916 · Malicious code in @jesusvizcaino2021/com.baogong.app-push-permission (npm)MAL-2026-2915 · Malicious code in bitu-staking (npm)MAL-2026-2870 · Malicious code in black-moon-js (npm)MAL-2026-2869 · Malicious code in arlo-meeting-assistant-rtms (npm)MAL-2026-2868 · Malicious code in arlo-meeting-assistant-frontend (npm)MAL-2026-2867 · Malicious code in arlo-meeting-assistant-backend (npm)MAL-2026-2851 · Malicious code in @indriver-poc/whisperwind (npm)MAL-2026-2849 · Malicious code in @than1st/baileys (npm)MAL-2026-2848 · Malicious code in @than-xs/libsignal-node (npm)MAL-2026-2739 · Malicious code in ccip-starter-kit-hardhat (npm)MAL-2026-2738 · Malicious code in cardreadermgmtserv (npm)MAL-2026-2737 · Malicious code in business-data (npm)MAL-2026-2736 · Malicious code in buildkite-test-collector-vitest-example (npm)MAL-2026-2735 · Malicious code in buildkite-test-collector-playwright-example (npm)MAL-2026-2734 · Malicious code in buildkite-test-collector-mocha-example (npm)MAL-2026-2733 · Malicious code in buildkite-test-collector-jest-example (npm)MAL-2026-2732 · Malicious code in buildkite-test-collector-jasmine-example (npm)MAL-2026-2731 · Malicious code in buildkite-test-collector-cypress-example (npm)MAL-2026-2730 · Malicious code in browserstack-utils (npm)MAL-2026-2729 · Malicious code in apl-github-test (npm)MAL-2026-2728 · Malicious code in apl-announcements (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。