OpenSSF Malicious Packages · OSV format
MAL-2026-10765 · Malicious code in syft-acp-core (npm)MAL-2026-10764 · Malicious code in syft-acp-atoms (npm)MAL-2026-12402 · Malicious code in new-native-tools-linux-x64-gnu (npm)MAL-2026-13396 · Malicious code in @activepieces/piece-google-forms (npm)MAL-2026-13395 · Malicious code in @activepieces/piece-google-contacts (npm)MAL-2026-13394 · Malicious code in @activepieces/piece-google-bigquery (npm)MAL-2026-13364 · Malicious code in @ikbal_fadilah_vanexa01/vanexa-agent (npm)MAL-2026-13363 · Malicious code in @cliphijack/santaclaude (npm)MAL-2026-13355 · Malicious code in @astralcore/sl-aura (npm)MAL-2026-12320 · Malicious code in @lizhao1/memorax-code-internal (npm)MAL-2026-12313 · Malicious code in @ccfly/setup-darwin-x64 (npm)MAL-2026-12084 · Malicious code in @ccfly/setup-darwin-arm64 (npm)MAL-2026-10707 · Malicious code in @ai-support-agent/cli (npm)MAL-2026-10705 · Malicious code in @agent-link/agent (npm)MAL-2026-13418 · Malicious code in @ccfly/setup-linux-x64 (npm)MAL-2026-13416 · Malicious code in @bananacool467/ui-tools (npm)MAL-2026-13415 · Malicious code in @aubea/mars (npm)MAL-2026-13413 · Malicious code in @astralcore/aura-wb (npm)MAL-2026-13411 · Malicious code in @addai/node (npm)MAL-2026-13410 · Malicious code in @addai/entity-runtime (npm)MAL-2026-13409 · Malicious code in @addai/ainode (npm)MAL-2026-13407 · Malicious code in @0l00000l/auth (npm)MAL-2026-13406 · Malicious code in 9remote (npm)MAL-2026-13420 · Malicious code in @innocarpe/deepseek-build (npm)MAL-2026-13423 · Malicious code in fetchrtds (npm)MAL-2026-13417 · Malicious code in @ccfly/setup-linux-arm64 (npm)MAL-2026-13414 · Malicious code in @atom8n/inspector (npm)MAL-2026-13408 · Malicious code in @activepieces/piece-base44 (npm)MAL-2026-13386 · Malicious code in decapod-common (PyPI)MAL-2026-13380 · Malicious code in uncrypt (PyPI)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。