OpenSSF Malicious Packages · OSV format
MAL-2026-1492 · Malicious code in strapi-plugin-workspace-plugin (npm)MAL-2026-1485 · Malicious code in react-refresh-update (npm)MAL-2026-1477 · Malicious code in supply-hx (npm)MAL-2026-1466 · Malicious code in supplychain-security-demo (npm)MAL-2026-1464 · Malicious code in pretty-changelog-logger (npm)MAL-2026-1456 · Malicious code in rrweb-v1 (npm)MAL-2026-1415 · Malicious code in pulsard-utils (npm)MAL-2026-1400 · Malicious code in solana-pumpfun-sdk (npm)MAL-2026-1363 · Malicious code in react-svg-anchor (npm)MAL-2026-1353 · Malicious code in restrict-imports (npm)MAL-2026-1322 · Malicious code in rtxnode-sass22 (npm)MAL-2026-2002 · Malicious code in nflx-cmisc (npm)MAL-2026-1963 · Malicious code in polymarket-onchain (npm)MAL-2026-1961 · Malicious code in novi-cli (npm)MAL-2026-1958 · Malicious code in mtpmysql (npm)MAL-2026-1957 · Malicious code in mtpdb (npm)MAL-2026-1822 · Malicious code in postcss-hotfix (npm)MAL-2026-1821 · Malicious code in portal-lime (npm)MAL-2026-1820 · Malicious code in player-common-controls (npm)MAL-2026-1819 · Malicious code in player-common-composites (npm)MAL-2026-1818 · Malicious code in player-button (npm)MAL-2026-1817 · Malicious code in plate-playground-template (npm)MAL-2026-1815 · Malicious code in pkg1511222 (npm)MAL-2026-1814 · Malicious code in phx-core5 (npm)MAL-2026-1813 · Malicious code in phx-core4 (npm)MAL-2026-1812 · Malicious code in phx-core3 (npm)MAL-2026-1811 · Malicious code in phx-core2 (npm)MAL-2026-1810 · Malicious code in phx-core1 (npm)MAL-2026-1808 · Malicious code in path-to-regexp-updated (npm)MAL-2026-1807 · Malicious code in paramount-cmp-html5 (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。