OpenSSF Malicious Packages · OSV format
MAL-2025-192320 · Malicious code in dotnetenv (npm)MAL-2025-192319 · Malicious code in chai-promised-chain (npm)MAL-2025-192318 · Malicious code in chai-as-deployed (npm)MAL-2025-192290 · Malicious code in dotenv-intend (npm)MAL-2025-192289 · Malicious code in chai-test-await (npm)MAL-2025-191572 · Malicious code in cwanner (npm)MAL-2025-191569 · Malicious code in cookie-validate (npm)MAL-2025-191566 · Malicious code in chai-promise-chain (npm)MAL-2025-191546 · Malicious code in chai-status (npm)MAL-2024-9552 · Malicious code in client-s3 (npm)MAL-2024-9551 · Malicious code in client-lambda (npm)MAL-2026-830 · Malicious code in aligners (npm)MAL-2026-816 · Malicious code in @skyeng/libs (npm)MAL-2026-783 · Malicious code in adobe_pipeline_test (npm)MAL-2026-781 · Malicious code in ac-feature (npm)MAL-2026-779 · Malicious code in ac-dom-styles (npm)MAL-2026-777 · Malicious code in ac-dom-events (npm)MAL-2026-776 · Malicious code in ac-checksum (npm)MAL-2026-775 · Malicious code in ac-array (npm)MAL-2026-670 · Malicious code in aligned-array (npm)MAL-2026-659 · Malicious code in atg-atgse (npm)MAL-2026-549 · Malicious code in blockchain-helper-lib (npm)MAL-2026-527 · Malicious code in @santandergroup-uk/edgehome-components (npm)MAL-2026-526 · Malicious code in @row-components/pricing-embedded-sui (npm)MAL-2026-435 · Malicious code in aligntype (npm)MAL-2026-407 · Malicious code in babel-js (npm)MAL-2026-266 · Malicious code in @wbgo/shared (npm)MAL-2026-265 · Malicious code in @wb-team/uikit-myteam-web (npm)MAL-2026-263 · Malicious code in @spx-workforceops/shared-vue (npm)MAL-2026-262 · Malicious code in @spx-smartsorting/vue (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。