OpenSSF Malicious Packages · OSV format
MAL-2026-2139 · Malicious code in stats-helpers (PyPI)MAL-2026-2138 · Malicious code in open-vp-cal (PyPI)MAL-2026-2401 · Malicious code in rocketpill (PyPI)MAL-2026-2399 · Malicious code in flycalc (PyPI)MAL-2026-2201 · Malicious code in privaton-beacon-img-8f3603448690bdde-png (PyPI)MAL-2026-2010 · Malicious code in yelp-react-component-badge (npm)MAL-2026-2009 · Malicious code in repo-typescript-config (npm)MAL-2026-2008 · Malicious code in nintendoamerica-ncom (npm)MAL-2026-2012 · Malicious code in characterai-poc (npm)MAL-2025-2623 · Malicious code in corehome (npm)MAL-2026-2124 · Malicious code in mgrcfg (PyPI)MAL-2026-2122 · Malicious code in rowrapee (PyPI)MAL-2026-1544 · Malicious code in rowrap (PyPI)MAL-2026-2112 · Malicious code in apply-hive-table (PyPI)MAL-2026-2109 · Malicious code in pyregions-snowflake (PyPI)MAL-2026-2108 · Malicious code in modelconftranslator (PyPI)MAL-2026-2107 · Malicious code in financial-crimes-general-utils (PyPI)MAL-2026-2106 · Malicious code in dmclc (PyPI)MAL-2026-1240 · Malicious code in requests-ml-min (PyPI)MAL-2026-1225 · Malicious code in urllib-slim (PyPI)MAL-2026-1224 · Malicious code in spark-ml-utilities (PyPI)MAL-2026-1223 · Malicious code in risk-utilities (PyPI)MAL-2026-1222 · Malicious code in optimal-spark-config (PyPI)MAL-2026-2118 · Malicious code in hash-utils-py (PyPI)MAL-2026-2101 · Malicious code in sidebar-basket (npm)MAL-2026-2087 · Malicious code in in-app-marketing (npm)MAL-2026-2095 · Malicious code in pulse-shop-section (npm)MAL-2026-2089 · Malicious code in milla-migration (npm)MAL-2026-2088 · Malicious code in internal-linking (npm)MAL-2026-2105 · Malicious code in ty-search-suggestion (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。