OpenSSF Malicious Packages · OSV format
MAL-2026-1937 · Malicious code in @dotprompt/promptly-darwin-arm64 (npm)MAL-2026-1930 · Malicious code in @iflow-mcp/watercrawl-watercrawl-mcp (npm)MAL-2026-1929 · Malicious code in @aifabrix/miso-client (npm)MAL-2026-1635 · Malicious code in @polymarket-developers/clob-client (npm)MAL-2026-1634 · Malicious code in @panopto/api-core (npm)MAL-2026-1633 · Malicious code in @nxt-costco-com/forge-icons (npm)MAL-2026-1632 · Malicious code in @nxt-costco-com/forge-design-tokens (npm)MAL-2026-1631 · Malicious code in @nxt-costco-com/forge-components (npm)MAL-2026-1630 · Malicious code in @measures/responsive (npm)MAL-2026-1629 · Malicious code in @legacy-utils/core (npm)MAL-2026-1628 · Malicious code in @legacy-ui/core (npm)MAL-2026-1627 · Malicious code in @legacy-components/core (npm)MAL-2026-1626 · Malicious code in @kui-react/table (npm)MAL-2026-1625 · Malicious code in @kui-react/button (npm)MAL-2026-1624 · Malicious code in @inter-ikea-gallery/integration (npm)MAL-2026-1623 · Malicious code in @f5rest/odata-v4-service-metadata (npm)MAL-2026-1622 · Malicious code in @f5rest/odata-v4-server (npm)MAL-2026-1621 · Malicious code in @f5rest/odata-v4-parser (npm)MAL-2026-1620 · Malicious code in @f5rest/odata-v4-metadata (npm)MAL-2026-1619 · Malicious code in @f5rest/odata-v4-inmemory (npm)MAL-2026-1618 · Malicious code in @f5rest/odata-lens (npm)MAL-2026-1617 · Malicious code in @f5rest/icr-odata-adapter (npm)MAL-2026-1616 · Malicious code in @f5rest/icr-metadata-generator (npm)MAL-2026-1615 · Malicious code in @emerald-react/menu (npm)MAL-2026-1614 · Malicious code in @emerald-react/list (npm)MAL-2026-1613 · Malicious code in @emerald-react/label (npm)MAL-2026-1612 · Malicious code in @emerald-react/input (npm)MAL-2026-1611 · Malicious code in @emerald-react/icon-button (npm)MAL-2026-1610 · Malicious code in @emerald-react/icon (npm)MAL-2026-1609 · Malicious code in @emerald-react/ellis-ai-icon (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。