OpenSSF Malicious Packages · OSV format
MAL-2024-1114 · Malicious code in babel-preset-slick (npm)MAL-2026-760 · Malicious code in @helloflex/widget-next-sdk (npm)MAL-2026-740 · Malicious code in @msecscc/gaia (npm)MAL-2026-718 · Malicious code in @fxinternal/netdiagnostics (npm)MAL-2026-676 · Malicious code in @ikeacnalan/icons (npm)MAL-2026-519 · Malicious code in @afg-ikea/ikea-modals (npm)MAL-2026-518 · Malicious code in @afg-ikea/ikea-kiosk-related-components (npm)MAL-2026-517 · Malicious code in @afg-ikea/ikea-family-registration-module (npm)MAL-2026-329 · Malicious code in @brokenzzz/garfish (npm)MAL-2026-328 · Malicious code in 1231dai (npm)MAL-2025-47145 · Malicious code in @huobi-lib/vulcan-js-sdk (npm)MAL-2025-47130 · Malicious code in @account-portal/ui-toolkit-react (npm)MAL-2025-47041 · Malicious code in @navancorp/ta-fe-components (npm)MAL-2025-47040 · Malicious code in @liquid-web/utils (npm)MAL-2025-47039 · Malicious code in @liquid-web/services (npm)MAL-2025-47038 · Malicious code in @liquid-web/models (npm)MAL-2025-47037 · Malicious code in @liquid-web/mileage (npm)MAL-2025-47036 · Malicious code in @liquid-web/interceptors (npm)MAL-2025-47035 · Malicious code in @liquid-web/guards (npm)MAL-2025-47034 · Malicious code in @liquid-web/external-cards (npm)MAL-2025-47033 · Malicious code in @liquid-web/common (npm)MAL-2025-47032 · Malicious code in @liquid-web/app-services (npm)MAL-2025-47031 · Malicious code in @jsonjoy-com/base64 (npm)MAL-2025-47030 · Malicious code in @google_cloud/projectify (npm)MAL-2025-47029 · Malicious code in @google_cloud/precise-date (npm)MAL-2025-41450 · Malicious code in @metadata-ipfs/bonk.fun-ipfs (npm)MAL-2025-192745 · Malicious code in @aa-techops-ui/ping-authentication (npm)MAL-2025-191035 · Malicious code in @ntnx/passport-wso2 (npm)MAL-2026-1577 · Malicious code in ropie (PyPI)MAL-2026-1914 · Malicious code in tabullate (PyPI)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。