OpenSSF Malicious Packages · OSV format
MAL-2025-192814 · Malicious code in jsswapper (npm)MAL-2025-192812 · Malicious code in jsonrecap (npm)MAL-2025-192811 · Malicious code in jsonauto (npm)MAL-2025-192810 · Malicious code in jsonauthcap (npm)MAL-2025-192809 · Malicious code in jsonauth (npm)MAL-2025-192808 · Malicious code in jsonapptoken (npm)MAL-2025-192807 · Malicious code in json-panels (npm)MAL-2025-192453 · Malicious code in libxmlfinal4 (npm)MAL-2025-192451 · Malicious code in libxmlfinal (npm)MAL-2025-192384 · Malicious code in jsonify-errors (npm)MAL-2025-192321 · Malicious code in json-map-source (npm)MAL-2025-191577 · Malicious code in kyjnzu (npm)MAL-2026-861 · Malicious code in express-gueues (npm)MAL-2026-833 · Malicious code in express-configer (npm)MAL-2026-722 · Malicious code in express-groups-routes (npm)MAL-2026-690 · Malicious code in fileupload-util (npm)MAL-2026-636 · Malicious code in idv-script (npm)MAL-2026-635 · Malicious code in finnairshop (npm)MAL-2026-551 · Malicious code in express-lists-routes (npm)MAL-2026-529 · Malicious code in fileupload-core (npm)MAL-2026-521 · Malicious code in hammer-jquery (npm)MAL-2026-520 · Malicious code in ftm-noderpc (npm)MAL-2026-321 · Malicious code in flip-prx (npm)MAL-2026-286 · Malicious code in forms-new-design (npm)MAL-2026-244 · Malicious code in helium-module (npm)MAL-2026-243 · Malicious code in francium-web-visitors (npm)MAL-2026-242 · Malicious code in francium-utils (npm)MAL-2026-241 · Malicious code in francium-ui (npm)MAL-2026-218 · Malicious code in express-sessions-id (npm)MAL-2026-17 · Malicious code in identity-emitter (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。