OpenSSF Malicious Packages · OSV format
MAL-2026-12494 · Malicious code in ventrix-kit (npm)MAL-2026-12482 · Malicious code in tool-registry-scripts (npm)MAL-2026-12225 · Malicious code in time-utils-helper (npm)MAL-2026-11153 · Malicious code in triage_bot_using_sdkv3 (npm)MAL-2026-6379 · Malicious code in simplisafe-gatsby (npm)MAL-2026-15520 · Malicious code in ring-device-settings-library (npm)MAL-2026-14194 · Malicious code in system-performance-helper (npm)MAL-2026-12478 · Malicious code in test22221 (npm)MAL-2026-15516 · Malicious code in nx-app (npm)MAL-2026-15493 · Malicious code in ozturk-mfa (npm)MAL-2026-14033 · Malicious code in meualelo (npm)MAL-2026-13453 · Malicious code in pilgrimage-portal-client (npm)MAL-2026-13449 · Malicious code in merchantweb-lang-cookie-reset (npm)MAL-2026-12799 · Malicious code in poly-bbc-service (npm)MAL-2026-12796 · Malicious code in messenger-style (npm)MAL-2026-12416 · Malicious code in poly-custom-api (npm)MAL-2026-12404 · Malicious code in npm-module-service (npm)MAL-2026-12400 · Malicious code in matlab-azure-devops-extension (npm)MAL-2026-6371 · Malicious code in llm-traces-app (npm)MAL-2026-16086 · Malicious code in graphql-js-client-transform (npm)MAL-2026-15842 · Malicious code in google-internal-cloud-audit-security-check (npm)MAL-2026-15838 · Malicious code in frank-apple-utils (npm)MAL-2026-13448 · Malicious code in lib-frontsga (npm)MAL-2026-12795 · Malicious code in knowledge-grader (npm)MAL-2026-12790 · Malicious code in glia-functions-tools (npm)MAL-2026-12787 · Malicious code in dynstrg-howto (npm)MAL-2026-12669 · Malicious code in dbk-ui-forms (npm)MAL-2026-12387 · Malicious code in gekko-mev-bot (npm)MAL-2026-12379 · Malicious code in fastify-client-bundler (npm)MAL-2026-12368 · Malicious code in electrode-ota-ui-app (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。