OpenSSF Malicious Packages · OSV format
MAL-2025-191999 · Malicious code in elf-stats-candystriped-saddlebag-217 (npm)MAL-2025-191998 · Malicious code in elf-stats-candystriped-lantern-205 (npm)MAL-2025-191997 · Malicious code in elf-stats-candystriped-hollyberry-986 (npm)MAL-2025-191996 · Malicious code in elf-stats-candlelit-toy-571 (npm)MAL-2025-191994 · Malicious code in elf-stats-bright-star-712 (npm)MAL-2025-191993 · Malicious code in elf-stats-bright-cushion-246 (npm)MAL-2025-191992 · Malicious code in elf-stats-bright-bow-377 (npm)MAL-2025-191991 · Malicious code in elf-stats-aurora-workbench-5l3 (npm)MAL-2025-191990 · Malicious code in elf-stats-aurora-workbench-513 (npm)MAL-2025-191989 · Malicious code in elf-stats-aurora-garland-513 (npm)MAL-2025-191394 · Malicious code in drop-events-on-property-plugin (npm)MAL-2025-191393 · Malicious code in dialogflow-es (npm)MAL-2025-190954 · Malicious code in dashboard-empty-state (npm)MAL-2025-49400 · Malicious code in capes-ui (npm)MAL-2025-191472 · Malicious code in chai-auth (npm)MAL-2025-190951 · Malicious code in composite-reducer (npm)MAL-2025-190627 · Malicious code in chai-async-chain (npm)MAL-2025-190495 · Malicious code in chain-test-async (npm)MAL-2025-190494 · Malicious code in chai-test-async (npm)MAL-2025-192324 · Malicious code in ambient-map (npm)MAL-2025-191952 · Malicious code in angular-trackjs (npm)MAL-2025-191951 · Malicious code in @wb-drive/icons (npm)MAL-2025-191381 · Malicious code in @voiceflow/utils-designer (npm)MAL-2025-191371 · Malicious code in @voiceflow/secrets-provider (npm)MAL-2025-191361 · Malicious code in @voiceflow/nestjs-timeout (npm)MAL-2025-191360 · Malicious code in @voiceflow/nestjs-redis (npm)MAL-2025-191359 · Malicious code in @voiceflow/nestjs-rate-limit (npm)MAL-2025-191358 · Malicious code in @voiceflow/nestjs-mongodb (npm)MAL-2025-191357 · Malicious code in @voiceflow/nestjs-common (npm)MAL-2025-191344 · Malicious code in @voiceflow/encryption (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。