OpenSSF Malicious Packages · OSV format
MAL-2026-2727 · Malicious code in agent-starter (npm)MAL-2026-2726 · Malicious code in agent-scheduler (npm)MAL-2026-2725 · Malicious code in agent-framework-web (npm)MAL-2026-2724 · Malicious code in agdebugger-frontend (npm)MAL-2026-2723 · Malicious code in actions-label-commenter (npm)MAL-2026-2722 · Malicious code in action-setup-enos (npm)MAL-2026-2721 · Malicious code in access-worker-test (npm)MAL-2026-2720 · Malicious code in aca-review-apps (npm)MAL-2026-2719 · Malicious code in @youcanneverguessthisonereally/test-pkg (npm)MAL-2026-2718 · Malicious code in @the-coca-cola-company/receipt-scanner-admin-lib (npm)MAL-2026-2717 · Malicious code in @tax-taxdev/tools-scripts (npm)MAL-2026-2716 · Malicious code in @needl-ai/common (npm)MAL-2026-2715 · Malicious code in @mesh-atoms/typography (npm)MAL-2026-2714 · Malicious code in @gameforge/http-server (npm)MAL-2026-2713 · Malicious code in @fuego-tools/analytics (npm)MAL-2026-2712 · Malicious code in @evoja-web/redaction (npm)MAL-2026-2711 · Malicious code in @evoja-web/react-login (npm)MAL-2026-2710 · Malicious code in @evoja-web/create-react-project (npm)MAL-2026-2709 · Malicious code in @appleseed-apple/ac-sass-kit (npm)MAL-2026-2696 · Malicious code in bfx-hf-strategy-perf (npm)MAL-2026-2691 · Malicious code in base-counter-web (npm)MAL-2026-2690 · Malicious code in @pnc-ref/harmony-support-v18 (npm)MAL-2026-2689 · Malicious code in @pnc-ref/harmony-core-v18 (npm)MAL-2026-2688 · Malicious code in @pnc-cib/cib-core-lib (npm)MAL-2026-2683 · Malicious code in @athena-ui-components/axios (npm)MAL-2026-2682 · Malicious code in @athena-ui-components/deeplink (npm)MAL-2026-2681 · Malicious code in @athena-ui-components/dashboard-widget (npm)MAL-2026-2680 · Malicious code in @veygo/component-library (npm)MAL-2026-2672 · Malicious code in ahmed_salem_ph (npm)MAL-2026-2631 · Malicious code in babel-plugin-blocks (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。