OpenSSF Malicious Packages · OSV format
MAL-2026-806 · Malicious code in web3-chain-sinon (npm)MAL-2026-804 · Malicious code in breadcrumb-service (npm)MAL-2026-805 · Malicious code in aligned-arrays (npm)MAL-2026-802 · Malicious code in @sbseg-plugin/qbo-web-app-ui (npm)MAL-2026-801 · Malicious code in @rsgweb/utils (npm)MAL-2026-800 · Malicious code in @rsgweb/tina (npm)MAL-2026-799 · Malicious code in @rsgweb/rockstar-account (npm)MAL-2026-798 · Malicious code in @rsgweb/modules-core-www-page (npm)MAL-2026-797 · Malicious code in @rsgweb/modules-core-feedback (npm)MAL-2026-796 · Malicious code in @rdxportal/ui-components (npm)MAL-2026-795 · Malicious code in @opposhop/nuxt-ssr-cache (npm)MAL-2026-794 · Malicious code in @meli-lint/eslint-config-tests-jest (npm)MAL-2026-793 · Malicious code in @meli-lint/eslint-config-base-ts (npm)MAL-2026-792 · Malicious code in @meli-lint/eslint-config-base (npm)MAL-2026-791 · Malicious code in @hashicorp-internal/vault-reporting (npm)MAL-2026-788 · Malicious code in @sporting-life/sportinglife-betslip-sdk (npm)MAL-2026-787 · Malicious code in @sporting-life/sportinglife-be (npm)MAL-2026-786 · Malicious code in @rsgweb/locale-tools (npm)MAL-2026-808 · Malicious code in carcent (PyPI)MAL-2026-803 · Malicious code in moveworks-pipeline-test (PyPI)MAL-2026-790 · Malicious code in p7zip-full (PyPI)MAL-2025-47509 · Malicious code in syf-api-legacy (npm)MAL-2025-4581 · Malicious code in syf-api (npm)MAL-2026-695 · Malicious code in tsconfig-stitch (npm)MAL-2026-694 · Malicious code in tarax (npm)MAL-2026-669 · Malicious code in vite-ui-components (npm)MAL-2026-668 · Malicious code in typescript-react-apollo (npm)MAL-2026-667 · Malicious code in typed-document-node (npm)MAL-2026-666 · Malicious code in transform-react-display-name (npm)MAL-2026-665 · Malicious code in transform-exponentiation-operator (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。