OpenSSF Malicious Packages · OSV format
MAL-2026-2376 · Malicious code in nf-promise-state-machine (npm)MAL-2026-2375 · Malicious code in nf-console (npm)MAL-2026-2374 · Malicious code in my-not-little-durgham (npm)MAL-2026-2373 · Malicious code in my-little-durgham (npm)MAL-2026-2372 · Malicious code in mollie-api-adapter-poc (npm)MAL-2026-2371 · Malicious code in merchant-rps (npm)MAL-2026-2370 · Malicious code in mcc-data (npm)MAL-2026-2369 · Malicious code in loadshh (npm)MAL-2026-2328 · Malicious code in mcp-server-todo (npm)MAL-2026-2414 · Malicious code in ftapi-core (npm)MAL-2026-2368 · Malicious code in json-mapping-token (npm)MAL-2026-2367 · Malicious code in json-mapping-fetch (npm)MAL-2026-2366 · Malicious code in ghost-module (npm)MAL-2026-2325 · Malicious code in jonas-prettier-logger (npm)MAL-2026-2324 · Malicious code in jellyfi-pino-pretty-logger (npm)MAL-2026-2496 · Malicious code in chess-sec-ssrf1 (npm)MAL-2026-2495 · Malicious code in cloudera (npm)MAL-2026-2493 · Malicious code in cloudera-poc (npm)MAL-2026-2444 · Malicious code in exszpe3szs (npm)MAL-2026-2443 · Malicious code in exprrrress (npm)MAL-2026-2442 · Malicious code in expreeeess (npm)MAL-2026-2441 · Malicious code in expirs (npm)MAL-2026-2440 · Malicious code in experedzss (npm)MAL-2026-2439 · Malicious code in expeewas (npm)MAL-2026-2438 · Malicious code in expeedsxs (npm)MAL-2026-2437 · Malicious code in exaprse (npm)MAL-2026-2436 · Malicious code in eixp4ressz (npm)MAL-2026-2365 · Malicious code in env-nodejs (npm)MAL-2026-2364 · Malicious code in env-node-cli (npm)MAL-2026-2363 · Malicious code in env-extend (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。