OpenSSF Malicious Packages · OSV format
MAL-2026-1221 · Malicious code in xrpl-dev-portal (npm)MAL-2026-1215 · Malicious code in whop-sdk (npm)MAL-2026-1214 · Malicious code in typescript-constructors (npm)MAL-2026-1213 · Malicious code in turbo-json-parser (npm)MAL-2026-1184 · Malicious code in web-prompt (npm)MAL-2026-1181 · Malicious code in webnochs (npm)MAL-2026-1180 · Malicious code in webnoch (npm)MAL-2026-1164 · Malicious code in yazxzpedia-libsignal (npm)MAL-2026-1162 · Malicious code in xpack-test-3.0 (npm)MAL-2026-1157 · Malicious code in token-discord-encryptation (npm)MAL-2026-1135 · Malicious code in yuji-baileys (npm)MAL-2026-1134 · Malicious code in ts-big-number (npm)MAL-2026-1114 · Malicious code in vitetest-lint (npm)MAL-2026-1113 · Malicious code in typoriem (npm)MAL-2026-1271 · Malicious code in qq-console (npm)MAL-2026-1212 · Malicious code in tailwindcss-forms-componentes (npm)MAL-2026-1211 · Malicious code in tailwindcss-forms-component (npm)MAL-2026-1210 · Malicious code in tailwindcss-forms-animation (npm)MAL-2026-1209 · Malicious code in tailwindcss-form-bundler (npm)MAL-2026-1208 · Malicious code in tailwindcss-fonts-bundler (npm)MAL-2026-1207 · Malicious code in selfbot-lofy (npm)MAL-2026-1183 · Malicious code in rbxm-utils (npm)MAL-2026-1156 · Malicious code in solongnerds (npm)MAL-2026-1155 · Malicious code in rullzdigital-libsignal (npm)MAL-2026-1154 · Malicious code in rullzdigital (npm)MAL-2026-1133 · Malicious code in sukuna-baileys (npm)MAL-2026-1112 · Malicious code in sequelization (npm)MAL-2026-1257 · Malicious code in pdfjs-dist-fourth (npm)MAL-2026-1256 · Malicious code in pearpass-lib-data-import (npm)MAL-2026-1255 · Malicious code in pearpass-lib-data-export (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。