OpenSSF Malicious Packages · OSV format
MAL-2026-2014 · Malicious code in address-autocompletetest (npm)MAL-2026-1995 · Malicious code in bic-seo (npm)MAL-2026-1939 · Malicious code in @solana-launchpads/sdk (npm)MAL-2026-1934 · Malicious code in big-nunber (npm)MAL-2026-1665 · Malicious code in browser-compat-data (npm)MAL-2026-1664 · Malicious code in brisk-web-ssr (npm)MAL-2026-1663 · Malicious code in braze-content-card-island (npm)MAL-2026-1662 · Malicious code in blob-internal-security-test-f63eabf7 (npm)MAL-2026-1661 · Malicious code in blackstone-core (npm)MAL-2026-1660 · Malicious code in bis-schemas (npm)MAL-2026-1659 · Malicious code in bcp-security-updates (npm)MAL-2026-1658 · Malicious code in bcp-security-update (npm)MAL-2026-1657 · Malicious code in backstage-plugin-wpe-catalog (npm)MAL-2026-1656 · Malicious code in argonnode (npm)MAL-2026-1655 · Malicious code in aligntyper (npm)MAL-2026-1654 · Malicious code in aligntypeer (npm)MAL-2026-1653 · Malicious code in align-configer (npm)MAL-2026-1652 · Malicious code in alfasec (npm)MAL-2026-1650 · Malicious code in advertising-shared (npm)MAL-2026-1649 · Malicious code in advertising-podlet (npm)MAL-2026-1648 · Malicious code in advertising-events (npm)MAL-2026-1647 · Malicious code in adobe-tracking (npm)MAL-2026-1646 · Malicious code in abstract-http-request (npm)MAL-2026-1645 · Malicious code in aboba-initial (npm)MAL-2026-1644 · Malicious code in aboba-docker-check (npm)MAL-2026-1643 · Malicious code in @vampirchik147/libxmljs2 (npm)MAL-2026-1642 · Malicious code in @upstashed/context7-mcp (npm)MAL-2026-1641 · Malicious code in @uc-platform/user-service-client-ts (npm)MAL-2026-1640 · Malicious code in @uc-platform/auth (npm)MAL-2026-1639 · Malicious code in @uc-platform/advertisement-service-client (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。