OpenSSF Malicious Packages · OSV format
MAL-2026-459 · Malicious code in un112 (npm)MAL-2026-438 · Malicious code in ts-tweetnacl-utils (npm)MAL-2026-432 · Malicious code in universal-provider (npm)MAL-2026-431 · Malicious code in testpkg-yilider690 (npm)MAL-2026-399 · Malicious code in torbaileys (npm)MAL-2026-398 · Malicious code in tor-libsignal (npm)MAL-2026-371 · Malicious code in theme-neutral (npm)MAL-2026-367 · Malicious code in uq-global-ec-uikit (npm)MAL-2026-366 · Malicious code in testing-package-bose (npm)MAL-2026-365 · Malicious code in telia-eventapi-client (npm)MAL-2026-333 · Malicious code in tronweb-tool (npm)MAL-2026-324 · Malicious code in typedoc-plugin-fuel-variants (npm)MAL-2026-448 · Malicious code in rank253222 (npm)MAL-2026-429 · Malicious code in sign-client (npm)MAL-2026-428 · Malicious code in shroom-kit (npm)MAL-2026-427 · Malicious code in replicate-js (npm)MAL-2026-426 · Malicious code in qdrant-js (npm)MAL-2026-397 · Malicious code in recaptcha-cors (npm)MAL-2026-396 · Malicious code in private-internal-sdk (npm)MAL-2026-377 · Malicious code in potdf (npm)MAL-2026-370 · Malicious code in sezzle (npm)MAL-2026-364 · Malicious code in shared-global-ec-uikit (npm)MAL-2026-363 · Malicious code in pl-global-ec-uikit (npm)MAL-2026-356 · Malicious code in react-server-dom-unbundled (npm)MAL-2026-348 · Malicious code in react-native-webview-forked (npm)MAL-2026-345 · Malicious code in private-payment-lib (npm)MAL-2026-437 · Malicious code in lumo-api-client (npm)MAL-2026-423 · Malicious code in oce-validate (npm)MAL-2026-422 · Malicious code in oce-icons (npm)MAL-2026-421 · Malicious code in oce-freecoin (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。