OpenSSF Malicious Packages · OSV format
MAL-2026-2239 · Malicious code in chaostoolkit-turbulence (PyPI)MAL-2026-2242 · Malicious code in somepentest-test-package (PyPI)MAL-2026-2233 · Malicious code in lightmock (PyPI)MAL-2026-2232 · Malicious code in checkmarx.cx-dev-assist (VSCode:https://open-vsx.org)MAL-2026-2231 · Malicious code in checkmarx.ast-results (VSCode:https://open-vsx.org)MAL-2026-2230 · Malicious code in aquasecurityofficial.trivy-vulnerability-scanner (VSCode:https://open-vsx.org)MAL-2026-2072 · Malicious code in react-leaflet-heatmap-layer (npm)MAL-2026-2071 · Malicious code in react-leaflet-cluster-layer (npm)MAL-2026-2027 · Malicious code in opengov-k6-core (npm)MAL-2026-2070 · Malicious code in jest-preset-ppf (npm)MAL-2026-2069 · Malicious code in eslint-config-service-users (npm)MAL-2026-2068 · Malicious code in eslint-config-ppf (npm)MAL-2026-2080 · Malicious code in cit-playwright-tests (npm)MAL-2026-2067 · Malicious code in babel-plugin-react-pure-component (npm)MAL-2026-2079 · Malicious code in @emilgroup/task-sdk-node (npm)MAL-2026-2078 · Malicious code in @emilgroup/task-sdk (npm)MAL-2026-2077 · Malicious code in @emilgroup/public-api-sdk-node (npm)MAL-2026-2076 · Malicious code in @emilgroup/document-uploader (npm)MAL-2026-2075 · Malicious code in @emilgroup/document-sdk-node (npm)MAL-2026-2073 · Malicious code in @airtm/uuid-base32 (npm)MAL-2026-2066 · Malicious code in @teale.io/eslint-config (npm)MAL-2026-2065 · Malicious code in @opengov/ppf-eslint-config (npm)MAL-2026-2064 · Malicious code in @opengov/ppf-backend-types (npm)MAL-2026-2063 · Malicious code in @opengov/form-utils (npm)MAL-2026-2062 · Malicious code in @leafnoise/mirage (npm)MAL-2026-2061 · Malicious code in @emilgroup/tenant-sdk-node (npm)MAL-2026-2060 · Malicious code in @emilgroup/tenant-sdk (npm)MAL-2026-2059 · Malicious code in @emilgroup/setting-sdk-node (npm)MAL-2026-2058 · Malicious code in @emilgroup/public-api-sdk (npm)MAL-2026-2057 · Malicious code in @emilgroup/payment-sdk-node (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。