OpenSSF Malicious Packages · OSV format
MAL-2026-13854 · Malicious code in @years18/n8n-nodes-utils-helper-j (npm)MAL-2026-13852 · Malicious code in @years18/n8n-nodes-utils-helper-f (npm)MAL-2026-13853 · Malicious code in @years18/n8n-nodes-utils-helper-g (npm)MAL-2026-13856 · Malicious code in @years18/n8n-nodes-utils-helper-l (npm)MAL-2026-13849 · Malicious code in @years18/n8n-nodes-utils-helper-c (npm)MAL-2026-13855 · Malicious code in @years18/n8n-nodes-utils-helper-k (npm)MAL-2026-13857 · Malicious code in @years18/n8n-nodes-utils-helper-m (npm)MAL-2026-13858 · Malicious code in @years18/n8n-nodes-utils-helper-n (npm)MAL-2026-13860 · Malicious code in @years18/n8n-nodes-utils-helper-p (npm)MAL-2026-13859 · Malicious code in @years18/n8n-nodes-utils-helper-o (npm)MAL-2026-13861 · Malicious code in @years18/n8n-nodes-utils-helper-q (npm)MAL-2026-13862 · Malicious code in @years18/n8n-nodes-utils-helper-r (npm)MAL-2026-13865 · Malicious code in @years18/n8n-nodes-utils-helper-u (npm)MAL-2026-13863 · Malicious code in @years18/n8n-nodes-utils-helper-s (npm)MAL-2026-13867 · Malicious code in @years18/n8n-nodes-utils-helper-w (npm)MAL-2026-13864 · Malicious code in @years18/n8n-nodes-utils-helper-t (npm)MAL-2026-13866 · Malicious code in @years18/n8n-nodes-utils-helper-v (npm)MAL-2026-13868 · Malicious code in @years18/n8n-nodes-utils-helper-x (npm)MAL-2026-13780 · Malicious code in @noxzacode/eslint-config (npm)MAL-2026-13781 · Malicious code in @noxzacode/libsignal-node (npm)MAL-2026-13798 · Malicious code in cvjwyinkpas (npm)MAL-2026-13731 · Malicious code in morpho-sdk (PyPI)MAL-2026-13730 · Malicious code in euler-sdk (PyPI)MAL-2026-13729 · Malicious code in dlmm-sdk (PyPI)MAL-2026-13728 · Malicious code in dlmm (PyPI)MAL-2026-13739 · Malicious code in ethereum-vault-connector (npm)MAL-2026-13738 · Malicious code in @openzeppelin-5/contracts (npm)MAL-2026-13737 · Malicious code in @openzeppelin-4/contracts (npm)MAL-2026-13735 · Malicious code in @aerodrome-finance/slipstream (npm)MAL-2026-13734 · Malicious code in @aerodrome-finance/contracts (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。