OpenSSF Malicious Packages · OSV format
MAL-2026-13507 · Malicious code in dolyame-ui-inputcolor (npm)MAL-2026-13500 · Malicious code in delivery-ci-dpat (npm)MAL-2026-13510 · Malicious code in dolyame-ui-progresscircle (npm)MAL-2026-13498 · Malicious code in ded-pwa-ded-pwa-core (npm)MAL-2026-13506 · Malicious code in dolyame-ui-inputbox (npm)MAL-2026-13508 · Malicious code in dolyame-ui-inputpassword (npm)MAL-2026-13512 · Malicious code in dolyame-ui-tabsblock (npm)MAL-2026-13513 · Malicious code in eacq-cdk (npm)MAL-2026-13499 · Malicious code in delivery-ci-codeceptjs-fork (npm)MAL-2026-13505 · Malicious code in dolyame-ui-iconloaderhoc (npm)MAL-2026-13501 · Malicious code in delivery-ci-jira-rnd (npm)MAL-2026-13496 · Malicious code in ded-pwa-c-cms (npm)MAL-2026-13509 · Malicious code in dolyame-ui-lazyrender (npm)MAL-2026-13511 · Malicious code in dolyame-ui-stateutils (npm)MAL-2026-13502 · Malicious code in devplatform-react-mcp (npm)MAL-2026-13515 · Malicious code in eacq-dialog (npm)MAL-2026-13494 · Malicious code in bigops-telephony-mock (npm)MAL-2026-13497 · Malicious code in ded-pwa-c-page-maker-props (npm)MAL-2026-13514 · Malicious code in eacq-core (npm)MAL-2026-13503 · Malicious code in distributorblock (npm)MAL-2026-13517 · Malicious code in gas-diff-core (npm)MAL-2026-13466 · Malicious code in wormgpt-cli (npm)MAL-2026-13484 · Malicious code in merge-grid-stats (npm)MAL-2026-13481 · Malicious code in cdf-tag-commander-helper (npm)MAL-2026-13479 · Malicious code in @cats-cdf/browser-metrics-meter (npm)MAL-2026-13478 · Malicious code in @cats-cdf/authentication (npm)MAL-2026-13480 · Malicious code in @prototypevip/baileys (npm)MAL-2026-13482 · Malicious code in diezyclutch-baileys (npm)MAL-2026-13403 · Malicious code in streak-cache-map (npm)MAL-2026-12489 · Malicious code in tui-react-tooltip (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。