OpenSSF Malicious Packages · OSV format
MAL-2026-14128 · Malicious code in motionspring (npm)MAL-2026-6470 · Malicious code in chlklib (npm)MAL-2026-14124 · Malicious code in alphazone (npm)MAL-2026-4510 · Malicious code in cerebrum-core (npm)MAL-2026-13700 · Malicious code in chai-as-deployer (npm)MAL-2026-13356 · Malicious code in chai-foundry (npm)MAL-2026-12352 · Malicious code in checkout-mobile-pay-button (npm)MAL-2026-12351 · Malicious code in checkout-common-tokens (npm)MAL-2026-12063 · Malicious code in checkout-create-pos-order-am (npm)MAL-2026-4509 · Malicious code in celonix-otp-react (npm)MAL-2026-14086 · Malicious code in kit-hydration-vim (npm)MAL-2026-14119 · Malicious code in bcc-design-icons (npm)MAL-2026-14117 · Malicious code in bcc-design (npm)MAL-2026-14118 · Malicious code in core-tailwindcss-utility (npm)MAL-2026-14116 · Malicious code in runtime-health (npm)MAL-2026-11769 · Malicious code in @ornikar/react-native-svg-transformer (npm)MAL-2026-11757 · Malicious code in @ornikar/intl-config (npm)MAL-2026-4662 · Malicious code in rendezvous-js (npm)MAL-2026-6590 · Malicious code in envfile-sync-cli (npm)MAL-2026-4569 · Malicious code in gator-client (npm)MAL-2026-6443 · Malicious code in agentsync-pkg (npm)MAL-2026-4502 · Malicious code in bucket-protocol-sdk-v2 (npm)MAL-2026-4499 · Malicious code in bolt-delivery-menu-app (npm)MAL-2026-4495 · Malicious code in banana-stand (npm)MAL-2026-4481 · Malicious code in arc-diag-util (npm)MAL-2026-12341 · Malicious code in bnpl-blocks-independent-bnpl-search (npm)MAL-2026-12138 · Malicious code in agent-bot-api (npm)MAL-2026-10582 · Malicious code in async-mutex-v2 (npm)MAL-2026-10188 · Malicious code in awesome-ts-jest (npm)MAL-2026-6314 · Malicious code in @zynkit/probe (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。