OpenSSF Malicious Packages · OSV format
MAL-2026-19 · Malicious code in jest-config-ibm-cloud-cognitive (npm)MAL-2026-15 · Malicious code in eslint-config-skynet (npm)MAL-2026-10 · Malicious code in babel-preset-ibm-cloud-cognitive (npm)MAL-2025-192988 · Malicious code in yellowdiscordlookup (npm)MAL-2025-192888 · Malicious code in workvivo-layout-extension (npm)MAL-2025-192887 · Malicious code in workvivo-chatbot (npm)MAL-2025-192886 · Malicious code in workvivo-anniversary-automation (npm)MAL-2025-192885 · Malicious code in wealthbox-marketing (npm)MAL-2025-192884 · Malicious code in vite-react-setting (npm)MAL-2025-192883 · Malicious code in varshade-afc (npm)MAL-2025-192882 · Malicious code in vapark-boost-v1 (npm)MAL-2025-192881 · Malicious code in typeface-maison-neue (npm)MAL-2025-192880 · Malicious code in tierlist (npm)MAL-2026-4 · Malicious code in rules-playground (npm)MAL-2026-3 · Malicious code in rules-deployer (npm)MAL-2025-192978 · Malicious code in tailwindcss-typography-style (npm)MAL-2025-192977 · Malicious code in shopify-app-react-router (npm)MAL-2025-192976 · Malicious code in shop-minis-docs (npm)MAL-2025-192975 · Malicious code in rt-text-media-collection (npm)MAL-2025-192974 · Malicious code in rt-interactive-card-collection (npm)MAL-2025-192973 · Malicious code in react-dom-bindings (npm)MAL-2025-192972 · Malicious code in react-devtools-shared (npm)MAL-2025-192971 · Malicious code in react-devtools-extensions (npm)MAL-2025-192879 · Malicious code in tescoutils (npm)MAL-2025-192878 · Malicious code in teeseest (npm)MAL-2025-192876 · Malicious code in suntik-tiktok (npm)MAL-2025-192875 · Malicious code in sturdyfetch9 (npm)MAL-2025-192874 · Malicious code in sturdyfetch5 (npm)MAL-2025-192873 · Malicious code in sturdyfetch4 (npm)MAL-2025-192872 · Malicious code in sturdyfetch3 (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。