OpenSSF Malicious Packages · OSV format
MAL-2026-420 · Malicious code in oce-components (npm)MAL-2026-419 · Malicious code in oce-collaborate (npm)MAL-2026-418 · Malicious code in nanoid-js (npm)MAL-2026-394 · Malicious code in n8n-nodes-zl-vietts (npm)MAL-2026-393 · Malicious code in manage-root (npm)MAL-2026-374 · Malicious code in mised-discordjs-selfbot-v14 (npm)MAL-2026-369 · Malicious code in mw-shared-utils (npm)MAL-2026-368 · Malicious code in mw-proto-models (npm)MAL-2026-344 · Malicious code in ofjaaah-security-lib (npm)MAL-2026-343 · Malicious code in ofjaaah-internal-utils (npm)MAL-2026-342 · Malicious code in ofjaaah-build-tools (npm)MAL-2026-341 · Malicious code in ofjaaah-auth-module (npm)MAL-2026-340 · Malicious code in libsignal-yazxzcode (npm)MAL-2026-327 · Malicious code in mapkit-example-vanillajs (npm)MAL-2026-436 · Malicious code in jquery-ajaxchimp (npm)MAL-2026-417 · Malicious code in kanban-webcomponent (npm)MAL-2026-416 · Malicious code in hw-app-eth (npm)MAL-2026-391 · Malicious code in internallib_v962 (npm)MAL-2026-390 · Malicious code in internallib_v325 (npm)MAL-2026-362 · Malicious code in health-check-node (npm)MAL-2026-339 · Malicious code in internallib_v355 (npm)MAL-2026-338 · Malicious code in internal-company-sdk (npm)MAL-2026-389 · Malicious code in genki-analytics (npm)MAL-2026-361 · Malicious code in gu-global-ec-uikit (npm)MAL-2026-360 · Malicious code in excel-to-json-test (npm)MAL-2026-359 · Malicious code in dreame-claude (npm)MAL-2026-358 · Malicious code in dot-env-buffer (npm)MAL-2026-355 · Malicious code in dux-portal-privacy (npm)MAL-2026-354 · Malicious code in dux-portal (npm)MAL-2026-323 · Malicious code in eslint-plugin-fuel-react (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。