OpenSSF Malicious Packages · OSV format
MAL-2026-878 · Malicious code in magichat (PyPI)MAL-2026-811 · Malicious code in grokwrapper (PyPI)MAL-2026-6 · Malicious code in ziphash (PyPI)MAL-2025-192958 · Malicious code in smtmlib (PyPI)MAL-2025-192956 · Malicious code in cryptozip (PyPI)MAL-2025-192948 · Malicious code in extrazip (PyPI)MAL-2025-192690 · Malicious code in smtrlib (PyPI)MAL-2025-192689 · Malicious code in unizip (PyPI)MAL-2025-192579 · Malicious code in smtblib (PyPI)MAL-2025-192468 · Malicious code in yzip (PyPI)MAL-2025-192467 · Malicious code in gxzip (PyPI)MAL-2025-192432 · Malicious code in kzip (PyPI)MAL-2025-191919 · Malicious code in uzip (PyPI)MAL-2025-191918 · Malicious code in uuzip (PyPI)MAL-2025-191799 · Malicious code in mzip (PyPI)MAL-2025-191792 · Malicious code in minizip (PyPI)MAL-2026-986 · Malicious code in en-thrift-internal (npm)MAL-2026-1036 · Malicious code in uitil (PyPI)MAL-2026-1035 · Malicious code in neural-compressor-jax (PyPI)MAL-2026-978 · Malicious code in microsoft-cms-client (npm)MAL-2026-1029 · Malicious code in geocommunes-geoportal (PyPI)MAL-2026-1019 · Malicious code in spark-audit-notify (PyPI)MAL-2026-1004 · Malicious code in request-httpx-9 (PyPI)MAL-2026-1002 · Malicious code in newrubylogger (RubyGems)MAL-2026-1003 · Malicious code in cnnct-eaas-corre (PyPI)MAL-2026-1001 · Malicious code in request-httpx-4 (PyPI)MAL-2026-1000 · Malicious code in scraper-npm (PyPI)MAL-2026-974 · Malicious code in yarsg (npm)MAL-2026-893 · Malicious code in xsstesting (npm)MAL-2026-995 · Malicious code in vl-ui-contact-card (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。