OpenSSF Malicious Packages · OSV format
MAL-2026-169 · Malicious code in secguest-lib (npm)MAL-2026-232 · Malicious code in react-hook-form-js (npm)MAL-2026-231 · Malicious code in pinecone-js (npm)MAL-2026-230 · Malicious code in passport-google-auth-token (npm)MAL-2026-205 · Malicious code in rxjs-js (npm)MAL-2026-204 · Malicious code in pako-js (npm)MAL-2026-229 · Malicious code in milvus-js (npm)MAL-2026-228 · Malicious code in luxon-js (npm)MAL-2026-227 · Malicious code in llamaindex-js (npm)MAL-2026-225 · Malicious code in jsdom-js (npm)MAL-2026-212 · Malicious code in lyonscg (npm)MAL-2026-179 · Malicious code in n8n-nodes-vbmkajdsa-uehfitvv-ueqjhhhksdlkkmz (npm)MAL-2026-178 · Malicious code in n8n-nodes-hfgjf-irtuinvcm-lasdqewriit (npm)MAL-2026-177 · Malicious code in n8n-nodes-ggdv-hdfvcnnje-uyrokvbkl (npm)MAL-2026-176 · Malicious code in mixpanel-lib (npm)MAL-2026-175 · Malicious code in jwtdapp (npm)MAL-2026-240 · Malicious code in extended-path (npm)MAL-2026-224 · Malicious code in inquirer-js (npm)MAL-2026-223 · Malicious code in immer-js (npm)MAL-2026-222 · Malicious code in huggingface-js (npm)MAL-2026-221 · Malicious code in gradle-plugin (npm)MAL-2026-220 · Malicious code in framer-motion-js (npm)MAL-2026-219 · Malicious code in firestore-types (npm)MAL-2026-217 · Malicious code in experimental-utils (npm)MAL-2026-245 · Malicious code in cnamts-captcha-component (npm)MAL-2026-216 · Malicious code in cors-base (npm)MAL-2026-215 · Malicious code in auth-types (npm)MAL-2026-214 · Malicious code in analytics-browser (npm)MAL-2026-203 · Malicious code in body-parser-js (npm)MAL-2026-173 · Malicious code in cng-web-lib (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。