OpenSSF Malicious Packages · OSV format
MAL-2025-48018 · Malicious code in zero-slot-utility (npm)MAL-2025-48017 · Malicious code in vite-plugin-opticompress (npm)MAL-2025-48011 · Malicious code in vishu_transitive_fn (npm)MAL-2025-47936 · Malicious code in zdachboostv1 (npm)MAL-2025-47934 · Malicious code in vite-tsconfig-assistant (npm)MAL-2025-47933 · Malicious code in vite-plugin-chunk-chop (npm)MAL-2025-47870 · Malicious code in vite-plugin-parse-js (npm)MAL-2025-47743 · Malicious code in winstem-logging (npm)MAL-2025-47741 · Malicious code in vite-linting-js (npm)MAL-2025-47507 · Malicious code in vite-jsconfig (npm)MAL-2025-47023 · Malicious code in x-session-parser (npm)MAL-2025-41769 · Malicious code in steembase (PyPI)MAL-2025-41736 · Malicious code in regexparam (PyPI)MAL-2025-41719 · Malicious code in prometheus-api-metrics (PyPI)MAL-2025-41715 · Malicious code in peloton-client123 (PyPI)MAL-2025-41692 · Malicious code in ironic-secureboot-driver (PyPI)MAL-2025-41628 · Malicious code in celery-routr (PyPI)MAL-2025-41613 · Malicious code in vite-binding-js (npm)MAL-2025-38508 · Malicious code in vite-css-icon (npm)MAL-2025-49243 · Malicious code in ve.zz (npm)MAL-2025-49055 · Malicious code in ts-migrate-example (npm)MAL-2025-48950 · Malicious code in terminal-kleur (npm)MAL-2025-48939 · Malicious code in types-lodash.es (npm)MAL-2025-48935 · Malicious code in shopify-ruby (npm)MAL-2025-48934 · Malicious code in shopify-logistics (npm)MAL-2025-48865 · Malicious code in sessionfiy (npm)MAL-2025-48765 · Malicious code in tps-lookup (npm)MAL-2025-48507 · Malicious code in spot-electron-sdk (npm)MAL-2025-48505 · Malicious code in sb_wm_integrator (npm)MAL-2025-48440 · Malicious code in usage-tracker-secured (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。