OpenSSF Malicious Packages · OSV format
MAL-2026-1109 · Malicious code in jsnwebapptoken (npm)MAL-2026-1227 · Malicious code in gaia-marionette (npm)MAL-2026-1176 · Malicious code in gabby-types (npm)MAL-2026-1175 · Malicious code in ethersnog (npm)MAL-2026-1173 · Malicious code in eslint-verify-plugin (npm)MAL-2026-1148 · Malicious code in ethglobal-finale (npm)MAL-2026-1108 · Malicious code in hapi-lint (npm)MAL-2026-1107 · Malicious code in formmiderable (npm)MAL-2026-1106 · Malicious code in expressjs-lint (npm)MAL-2026-1219 · Malicious code in demo-pipelinetest (npm)MAL-2026-1218 · Malicious code in chai-as-confirmed (npm)MAL-2026-1195 · Malicious code in consolelofy (npm)MAL-2026-1194 · Malicious code in cmc-client (npm)MAL-2026-1193 · Malicious code in cloud-apis (npm)MAL-2026-1190 · Malicious code in bubblemap-bypass-sdk (npm)MAL-2026-1189 · Malicious code in bmath (npm)MAL-2026-1182 · Malicious code in bigmathutils-v2 (npm)MAL-2026-1147 · Malicious code in danzxoffc74-libsignal (npm)MAL-2026-1146 · Malicious code in danzxoffc74 (npm)MAL-2026-1129 · Malicious code in danzxz (npm)MAL-2026-1128 · Malicious code in colorize-console (npm)MAL-2026-1115 · Malicious code in chai-vest (npm)MAL-2026-1105 · Malicious code in daytonjs (npm)MAL-2026-1104 · Malicious code in bubble-core (npm)MAL-2026-1103 · Malicious code in bee-quarl (npm)MAL-2026-1102 · Malicious code in bcryptance (npm)MAL-2026-1270 · Malicious code in @wgu-edu/wgu-icons (npm)MAL-2026-1269 · Malicious code in @wgu-edu/wgu-core (npm)MAL-2026-1268 · Malicious code in @shenira/libsignal-node (npm)MAL-2026-1267 · Malicious code in @shenira/baileysx (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。