OpenSSF Malicious Packages · OSV format
MAL-2026-5351 · Malicious code in @demica/shared (npm)MAL-2026-5350 · Malicious code in @demica/resources (npm)MAL-2026-5349 · Malicious code in @demica/core (npm)MAL-2026-4393 · Malicious code in @hanssoft/libsignal-node (npm)MAL-2026-4288 · Malicious code in @jaggle/resizeobserves (npm)MAL-2026-13991 · Malicious code in webautomation_js (npm)MAL-2026-13990 · Malicious code in wct-st (npm)MAL-2026-13989 · Malicious code in @secauditb20y/sec-test-r3b (npm)MAL-2026-13986 · Malicious code in notafollower (npm)MAL-2026-13950 · Malicious code in fmt-util-k7x2 (npm)MAL-2026-13978 · Malicious code in datefmt-util-helper (npm)MAL-2026-13972 · Malicious code in @jacksher/install-exec-poc (npm)MAL-2026-13985 · Malicious code in node-config-svg-contract (npm)MAL-2026-13973 · Malicious code in @khaznatech/common (npm)MAL-2026-13975 · Malicious code in @khaznatech/utils (npm)MAL-2026-13974 · Malicious code in @khaznatech/core (npm)MAL-2026-13968 · Malicious code in @hzero-front-ui/cfg (npm)MAL-2026-13967 · Malicious code in @hzero-front-ui/c7n-ui (npm)MAL-2026-13969 · Malicious code in @hzero-front-ui/core (npm)MAL-2026-13970 · Malicious code in @hzero-front-ui/hzero-ui (npm)MAL-2026-13971 · Malicious code in @hzero-front-ui/themes (npm)MAL-2026-13988 · Malicious code in xrblocks-mcp (npm)MAL-2026-11159 · Malicious code in toll_free (npm)MAL-2026-13966 · Malicious code in tizen-webdriver-cli (npm)MAL-2026-13965 · Malicious code in nc-verify-127942 (npm)MAL-2026-13963 · Malicious code in vexium-kit (npm)MAL-2026-13948 · Malicious code in debug-proxy-chrome-devtools (npm)MAL-2026-13941 · Malicious code in @solana-js/web3 (npm)MAL-2026-13949 · Malicious code in external-process-live-log (npm)MAL-2026-13939 · Malicious code in @leonardo0902/vortex-kit (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。