OpenSSF Malicious Packages · OSV format
MAL-2026-12214 · Malicious code in statist-browser-typed-client-sme.platform.web.productsnavigation.events (npm)MAL-2026-12074 · Malicious code in statist-browser-typed-client-nfs.grocery.mobile.events (npm)MAL-2026-12000 · Malicious code in streak-math-metrics (npm)MAL-2026-12785 · Malicious code in devplatform-spa-tokens (npm)MAL-2026-12779 · Malicious code in devplatform-spa-plugin-s3-module-loader (npm)MAL-2026-14500 · Malicious code in svelte-streak-map (npm)MAL-2026-14499 · Malicious code in svelte-map-metric (npm)MAL-2026-14495 · Malicious code in svelte-hydration-streak (npm)MAL-2026-14498 · Malicious code in svelte-intake-streaks (npm)MAL-2026-14494 · Malicious code in svelte-goal-streaks (npm)MAL-2026-14501 · Malicious code in svelte-streak-panel (npm)MAL-2026-14502 · Malicious code in svelte-streak-tracker (npm)MAL-2026-14497 · Malicious code in svelte-insights-streak (npm)MAL-2026-14496 · Malicious code in svelte-insight-streaks (npm)MAL-2026-14493 · Malicious code in svelte-daily-streaks (npm)MAL-2026-14492 · Malicious code in spotify-url-infos (npm)MAL-2026-14491 · Malicious code in chai-as-otc (npm)MAL-2026-12211 · Malicious code in statist-browser-typed-client-mb.product.analytics (npm)MAL-2026-13461 · Malicious code in supersig (npm)MAL-2026-12045 · Malicious code in statist-browser-typed-client-hra.workplacer.events (npm)MAL-2026-14305 · Malicious code in mc-provider (npm)MAL-2026-14294 · Malicious code in mc-registry (npm)MAL-2026-14490 · Malicious code in mkb-manager (npm)MAL-2026-14470 · Malicious code in whatsgoodlookingbabycreed (npm)MAL-2026-14469 · Malicious code in tungtungisgoated (npm)MAL-2026-14468 · Malicious code in tungtunggod (npm)MAL-2026-14467 · Malicious code in superdupertest111 (npm)MAL-2026-14485 · Malicious code in secretkey-2fa (npm)MAL-2026-14466 · Malicious code in sonsonsahur (npm)MAL-2026-14465 · Malicious code in schoolwork (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。