OpenSSF Malicious Packages · OSV format
MAL-2026-2250 · Malicious code in test1sharp (npm)MAL-2026-2196 · Malicious code in tailwind-compile (npm)MAL-2026-1973 · Malicious code in woltpickerapp (npm)MAL-2026-1968 · Malicious code in safe-json-parsex (npm)MAL-2026-1926 · Malicious code in tokenshower (npm)MAL-2026-1839 · Malicious code in react-state-optimizer-core (npm)MAL-2026-1836 · Malicious code in react-performance-suite (npm)MAL-2026-1835 · Malicious code in react-fast-utilsa (npm)MAL-2026-1405 · Malicious code in whatsapp-fastdesk-utils-drzak (npm)MAL-2026-1404 · Malicious code in whatsapp-core-auth-drzak (npm)MAL-2026-1403 · Malicious code in tradepmr-fusion-core-drzak (npm)MAL-2026-1402 · Malicious code in tradepmr-api-utils-drzak (npm)MAL-2026-1374 · Malicious code in spectral-corsair-my-backdoor (npm)MAL-2025-5063 · Malicious code in universal-media-player (npm)MAL-2025-5060 · Malicious code in sitewidesearch-client (npm)MAL-2025-5058 · Malicious code in secure-lib (npm)MAL-2025-5051 · Malicious code in react-expiry-date (npm)MAL-2025-34723 · Malicious code in terminalcolor256 (npm)MAL-2025-2895 · Malicious code in shopmacher-mollie-application (npm)MAL-2024-9888 · Malicious code in typescript-operations (npm)MAL-2026-2237 · Malicious code in jsonify-builder (npm)MAL-2026-2226 · Malicious code in node-coremesh (npm)MAL-2026-2225 · Malicious code in neanderthal-validator (npm)MAL-2026-2200 · Malicious code in json-lucide (npm)MAL-2026-2188 · Malicious code in levex-refa (npm)MAL-2026-2161 · Malicious code in path-external (npm)MAL-2026-1978 · Malicious code in json-specular (npm)MAL-2026-1977 · Malicious code in json-bundling (npm)MAL-2026-1962 · Malicious code in parsejson-pro (npm)MAL-2026-1960 · Malicious code in nodex-db (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。