OpenSSF Malicious Packages · OSV format
MAL-2026-13952 · Malicious code in global-intel (npm)MAL-2026-13938 · Malicious code in @kolbo/mcp (npm)MAL-2026-13962 · Malicious code in ventra-kit (npm)MAL-2026-13959 · Malicious code in prediction-trader (npm)MAL-2026-13942 · Malicious code in chai-as-reformed (npm)MAL-2026-13951 · Malicious code in functions-framework-nodejs (npm)MAL-2026-13943 · Malicious code in cilm-ui-commons (npm)MAL-2026-13944 · Malicious code in copytrade-core (npm)MAL-2026-13960 · Malicious code in process-live-log (npm)MAL-2026-13937 · Malicious code in @ethers-js/contracts (npm)MAL-2026-13940 · Malicious code in @opezneppelin/contracts (npm)MAL-2026-13956 · Malicious code in npm-hex-utils (npm)MAL-2026-13953 · Malicious code in js-assert-plus (npm)MAL-2026-13954 · Malicious code in minimalistic-assert-plus (npm)MAL-2026-13958 · Malicious code in power-assert-plus (npm)MAL-2026-13957 · Malicious code in postcss-initialize-plugin (npm)MAL-2026-13946 · Malicious code in date-fmt-helper-xz (npm)MAL-2026-13947 · Malicious code in date-fmt-utils-helper (npm)MAL-2026-13945 · Malicious code in core-js-buffer (npm)MAL-2026-13995 · Malicious code in @dsp-next-gen-ui/needs-review (npm)MAL-2026-14002 · Malicious code in index-design-system (npm)MAL-2026-14001 · Malicious code in finvu-hdfc-sdk (npm)MAL-2026-14000 · Malicious code in blocks-angular (npm)MAL-2026-13994 · Malicious code in @caspianph/third-npm-package (npm)MAL-2026-13993 · Malicious code in @caspianph/second-npm-package (npm)MAL-2026-13992 · Malicious code in @caspianph/first-npm-package (npm)MAL-2026-14015 · Malicious code in ts-enum-helper (npm)MAL-2026-13936 · Malicious code in datetime-format-xutil (npm)MAL-2026-13935 · Malicious code in datetime-fmt-xutil (npm)MAL-2026-13928 · Malicious code in internallib_v756 (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。