OpenSSF Malicious Packages · OSV format
MAL-2026-16372 · Malicious code in @zig-design-system/react (npm)MAL-2026-15833 · Malicious code in apple-cktool-internal-api-v9 (npm)MAL-2026-15528 · Malicious code in axis-datagrid (npm)MAL-2026-14119 · Malicious code in bcc-design-icons (npm)MAL-2026-14117 · Malicious code in bcc-design (npm)MAL-2026-14066 · Malicious code in akamaijs-sensorv1 (npm)MAL-2026-14065 · Malicious code in akamai-sensor (npm)MAL-2026-14028 · Malicious code in alelo-utils (npm)MAL-2026-14027 · Malicious code in alelo-services (npm)MAL-2026-14026 · Malicious code in alelo-sdk (npm)MAL-2026-14025 · Malicious code in alelo-payment (npm)MAL-2026-14024 · Malicious code in alelo-core (npm)MAL-2026-14023 · Malicious code in alelo-common (npm)MAL-2026-14022 · Malicious code in alelo-client (npm)MAL-2026-14021 · Malicious code in alelo-auth (npm)MAL-2026-14020 · Malicious code in alelo-api (npm)MAL-2026-13438 · Malicious code in cewe-npm-cops (npm)MAL-2026-13436 · Malicious code in @wbnr/frontend-shared (npm)MAL-2026-12514 · Malicious code in async-mutex-v3 (npm)MAL-2026-12507 · Malicious code in @sapappgyver/appgyver-descriptors (npm)MAL-2026-12360 · Malicious code in csv-parser-helper (npm)MAL-2026-12355 · Malicious code in com.db.dbk.ui-forms (npm)MAL-2026-12350 · Malicious code in chart-data-utils (npm)MAL-2026-12348 · Malicious code in chai-as-rendered (npm)MAL-2026-12339 · Malicious code in async-mutex-hook (npm)MAL-2026-12338 · Malicious code in alpha-helper (npm)MAL-2026-9999 · Malicious code in zztxtwtmp12 (RubyGems)MAL-2026-9998 · Malicious code in zztxtwtmp11 (RubyGems)MAL-2026-9997 · Malicious code in zztxtwtmp10 (RubyGems)MAL-2026-9996 · Malicious code in zztxtwtmp09 (RubyGems)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。