OpenSSF Malicious Packages · OSV format
MAL-2026-2131 · Malicious code in nemo-fpti (npm)MAL-2026-2224 · Malicious code in jito-validator-sdk (npm)MAL-2026-2300 · Malicious code in eslint-validator (npm)MAL-2026-2297 · Malicious code in earthengine-api (npm)MAL-2026-2287 · Malicious code in f0-state-manager (npm)MAL-2026-2285 · Malicious code in dial-app-version (npm)MAL-2026-2258 · Malicious code in current-context-urn (npm)MAL-2026-2253 · Malicious code in dgxeon-soket-buttonx (npm)MAL-2026-2252 · Malicious code in dgxeon-baileys (npm)MAL-2026-2247 · Malicious code in cua-primitives-server (npm)MAL-2026-2194 · Malicious code in ffsixx (npm)MAL-2026-2192 · Malicious code in changelog-utils-wrapper (npm)MAL-2026-2191 · Malicious code in changelog-utils-logger (npm)MAL-2026-2169 · Malicious code in console-loggers (npm)MAL-2026-2168 · Malicious code in chai-patch (npm)MAL-2026-2129 · Malicious code in express-session-validator (npm)MAL-2026-2128 · Malicious code in express-session-vailidator (npm)MAL-2026-2125 · Malicious code in customerdigital-ui-components-lib (npm)MAL-2026-2296 · Malicious code in bos-decoration-elements (npm)MAL-2026-2284 · Malicious code in bizsignupnodeweb (npm)MAL-2026-2243 · Malicious code in browserstack-electron-forge-include-package-plugin (npm)MAL-2026-2229 · Malicious code in @zecho/libsignal (npm)MAL-2026-2228 · Malicious code in @zecho/baileys-mod (npm)MAL-2026-2221 · Malicious code in @validator-lut-sdk/v3 (npm)MAL-2026-2220 · Malicious code in @universeorg/dotenv (npm)MAL-2026-2219 · Malicious code in @solmasterv3/solana-metadata-sdk (npm)MAL-2026-2218 · Malicious code in @solana-ipfs/sdk (npm)MAL-2026-2216 · Malicious code in @pumpfun-ipfs/sdk (npm)MAL-2026-2213 · Malicious code in @virtahealth/substrate-root (npm)MAL-2026-2212 · Malicious code in @opengov/qa-record-types-api (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。