OpenSSF Malicious Packages · OSV format
MAL-2025-191059 · Malicious code in @trigo/atrix-swagger (npm)MAL-2025-191058 · Malicious code in @trefox/sleekshop-js (npm)MAL-2025-191057 · Malicious code in @tiaanduplessis/react-progressbar (npm)MAL-2025-191056 · Malicious code in @tiaanduplessis/json (npm)MAL-2025-191055 · Malicious code in @thedelta/eslint-config (npm)MAL-2025-191468 · Malicious code in @lokeswari-satyanarayanan/rn-zustand-expo-template (npm)MAL-2025-191458 · Malicious code in @medusajs/medusa-oas-cli (npm)MAL-2025-191457 · Malicious code in @medusajs/medusa (npm)MAL-2025-191456 · Malicious code in @medusajs/analytics-posthog (npm)MAL-2025-191455 · Malicious code in @kong/spec-renderer (npm)MAL-2025-191454 · Malicious code in @freeday-ai/webchat (npm)MAL-2025-191453 · Malicious code in @flowfuse/flowfuse (npm)MAL-2025-191452 · Malicious code in @eventcatalog/generator-asyncapi (npm)MAL-2025-191451 · Malicious code in @devx-commerce/plugin-discounts (npm)MAL-2025-191450 · Malicious code in @axinom/mosaic-cli (npm)MAL-2025-191449 · Malicious code in @accordproject/markdown-cli (npm)MAL-2025-191321 · Malicious code in @sme-ui/aoma-vevasound-metadata-lib (npm)MAL-2025-191320 · Malicious code in @silgi/yoga (npm)MAL-2025-191319 · Malicious code in @silgi/scalar (npm)MAL-2025-191318 · Malicious code in @silgi/ratelimit (npm)MAL-2025-191317 · Malicious code in @silgi/permission (npm)MAL-2025-191316 · Malicious code in @silgi/openapi (npm)MAL-2025-191315 · Malicious code in @silgi/module-builder (npm)MAL-2025-191314 · Malicious code in @silgi/graphql (npm)MAL-2025-191313 · Malicious code in @silgi/ecosystem (npm)MAL-2025-191312 · Malicious code in @silgi/drizzle (npm)MAL-2025-191311 · Malicious code in @silgi/better-auth (npm)MAL-2025-191310 · Malicious code in @sameepsi/sor2 (npm)MAL-2025-191309 · Malicious code in @sameepsi/sor (npm)MAL-2025-191308 · Malicious code in @quick-start-soft/quick-remove-image-background (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。