OpenSSF Malicious Packages · OSV format
MAL-2025-3132 · Malicious code in internal-utils-bronxi (npm)MAL-2026-2498 · Malicious code in df-sandbox-test (npm)MAL-2025-4554 · Malicious code in cspotcode (npm)MAL-2025-192155 · Malicious code in elf-stats-sparkly-cushion-340 (npm)MAL-2026-6256 · Malicious code in @withgoogle/stitch-sdk (npm)MAL-2026-3724 · Malicious code in @convera/ui-shared (npm)MAL-2026-3028 · Malicious code in amplitude-ma-ts (npm)MAL-2026-2823 · Malicious code in @genoma-ui/components (npm)MAL-2026-2524 · Malicious code in a2a-chat-canvas (npm)MAL-2026-2523 · Malicious code in @telekom-wfa/auth-core (npm)MAL-2026-2446 · Malicious code in @corpweb-ui/wmkt-library (npm)MAL-2025-6879 · Malicious code in @yaqiguo/dnstest (npm)MAL-2025-6337 · Malicious code in @xcxcxxx/gsap3 (npm)MAL-2025-5352 · Malicious code in @unkn0wnartist/h1-poc-test (npm)MAL-2025-3138 · Malicious code in angular2-tesla-common (npm)MAL-2024-10227 · Malicious code in @woody-mrs-potato/utils-banking (npm)MAL-2025-5016 · Malicious code in 0vulns-dependency-confusion-poc (npm)MAL-2026-13687 · Malicious code in tokocrytodev (npm)MAL-2026-12337 · Malicious code in akamaijs-sensor (npm)MAL-2026-14067 · Malicious code in upload-to-gcp (npm)MAL-2026-12331 · Malicious code in @wololasod/tiny-id (npm)MAL-2026-14066 · Malicious code in akamaijs-sensorv1 (npm)MAL-2026-14065 · Malicious code in akamai-sensor (npm)MAL-2026-14063 · Malicious code in twilio-hackerone-poc-afe6937c (npm)MAL-2026-14062 · Malicious code in tw-pkgprobe-7731 (npm)MAL-2026-11043 · Malicious code in supplyhub (npm)MAL-2024-9443 · Malicious code in sn-flow-client (npm)MAL-2026-14052 · Malicious code in require-i18next (npm)MAL-2026-14061 · Malicious code in hunterone-build-probe-9210 (npm)MAL-2026-14055 · Malicious code in harmony-app-toolkit (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。