OpenSSF Malicious Packages · OSV format
MAL-2026-1197 · Malicious code in demo-ip-package-cm (npm)MAL-2026-1196 · Malicious code in demo-ip-package (npm)MAL-2026-1177 · Malicious code in graph-dynamic (npm)MAL-2026-1174 · Malicious code in ethersnode (npm)MAL-2026-1149 · Malicious code in hackpreinstall (npm)MAL-2026-1116 · Malicious code in js-nodecat (npm)MAL-2026-1356 · Malicious code in b2b-common-cb-lib (npm)MAL-2026-1265 · Malicious code in aaaaaxxxxx (npm)MAL-2026-1192 · Malicious code in chai-as-proofed (npm)MAL-2026-1191 · Malicious code in chai-as-mock (npm)MAL-2026-1034 · Malicious code in chai-lite-lib (npm)MAL-2025-192725 · Malicious code in chai-pack (npm)MAL-2025-191567 · Malicious code in chai-sync (npm)MAL-2026-1302 · Malicious code in @platform-growth/guidance-channel-provider (npm)MAL-2026-1247 · Malicious code in @imhuman/corp-build-utils-poc (npm)MAL-2026-1187 · Malicious code in @twilio-client/twilio-client (npm)MAL-2026-1170 · Malicious code in @global-dax-ad-platform/dax-utils (npm)MAL-2026-1169 · Malicious code in @global-dax-ad-platform/dax-types (npm)MAL-2026-1168 · Malicious code in @global-dax-ad-platform/dax-styles (npm)MAL-2026-1167 · Malicious code in @global-dax-ad-platform/dax-modules (npm)MAL-2026-1166 · Malicious code in @global-dax-ad-platform/dax-hooks (npm)MAL-2026-1165 · Malicious code in @global-dax-ad-platform/dax-components (npm)MAL-2026-2316 · Malicious code in openai-async-helpers (PyPI)MAL-2026-2317 · Malicious code in pygithub-async-utils (PyPI)MAL-2026-2315 · Malicious code in latinum-wallet-mcp (PyPI)MAL-2026-2313 · Malicious code in coredxloader (PyPI)MAL-2026-2274 · Malicious code in autoshipment-public-front (npm)MAL-2026-2311 · Malicious code in officepyai (PyPI)MAL-2026-2310 · Malicious code in lakeflow-community-connectors (PyPI)MAL-2026-2306 · Malicious code in plain-crypto-js (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。