OpenSSF Malicious Packages · OSV format
MAL-2026-14055 · Malicious code in harmony-app-toolkit (npm)MAL-2026-14059 · Malicious code in autbank-core (npm)MAL-2026-14057 · Malicious code in @openrepl/shared (npm)MAL-2026-14058 · Malicious code in adxaa (npm)MAL-2026-14060 · Malicious code in fastly-vcl-language-client (npm)MAL-2026-14051 · Malicious code in @velliajs/discord (npm)MAL-2026-14072 · Malicious code in @peptideventure/peptide-unit (npm)MAL-2026-14048 · Malicious code in @lodash-js/lodash-js (npm)MAL-2026-14050 · Malicious code in @polymarkets/clob-client-v2 (npm)MAL-2026-14049 · Malicious code in @mexc/shared-utils (npm)MAL-2026-10711 · Malicious code in @funny-booth/agent-core (npm)MAL-2026-14047 · Malicious code in @guangnao/agent-proxy (npm)MAL-2026-14046 · Malicious code in @ghost_debugger/nanocache (npm)MAL-2026-14045 · Malicious code in @ferudionz/webautomation (npm)MAL-2026-14044 · Malicious code in @ferudionz/web_logger_js (npm)MAL-2026-11170 · Malicious code in @finxsecdemo/utils (npm)MAL-2026-14043 · Malicious code in @divineubg/divine (npm)MAL-2026-14042 · Malicious code in @devmikets/hyperliquid-sdk (npm)MAL-2026-14041 · Malicious code in @demopack/www (npm)MAL-2026-6562 · Malicious code in @epic-common/observability-node (npm)MAL-2025-49192 · Malicious code in epic-sso (npm)MAL-2025-49125 · Malicious code in epic-common-node (npm)MAL-2025-49124 · Malicious code in epic-common (npm)MAL-2026-13926 · Malicious code in sui-gql (npm)MAL-2026-14029 · Malicious code in axios-fast (npm)MAL-2026-14040 · Malicious code in @workoscalifant/sudoku-term (npm)MAL-2026-13366 · Malicious code in @workoscalif/sudoku (npm)MAL-2026-14039 · Malicious code in @cdnshell/loader (npm)MAL-2026-14014 · Malicious code in try-lock-runner (npm)MAL-2026-14013 · Malicious code in source-analyzer (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。