OpenSSF Malicious Packages · OSV format
MAL-2026-13458 · Malicious code in squeez (npm)MAL-2026-13457 · Malicious code in shadowx-fca (npm)MAL-2026-13455 · Malicious code in remote-claude-daemon (npm)MAL-2026-13454 · Malicious code in poc-ch4rlygr (npm)MAL-2026-13452 · Malicious code in opencode-optimised-toolings (npm)MAL-2026-12669 · Malicious code in dbk-ui-forms (npm)MAL-2026-12368 · Malicious code in electrode-ota-ui-app (npm)MAL-2025-6894 · Malicious code in commonweb-flow (npm)MAL-2026-13445 · Malicious code in elephant-tusk-runner (npm)MAL-2026-13209 · Malicious code in @guangnao/claude-cli (npm)MAL-2026-12504 · Malicious code in @cy4dev/cydemo-bg-color (npm)MAL-2026-12334 · Malicious code in ach-detail (npm)MAL-2026-12108 · Malicious code in alipclutch-baileys (npm)MAL-2026-11196 · Malicious code in @wbnr/design (npm)MAL-2026-13436 · Malicious code in @wbnr/frontend-shared (npm)MAL-2026-13434 · Malicious code in @lyxa.ai/core (npm)MAL-2026-13432 · Malicious code in @junyoung-kim/reins (npm)MAL-2026-13431 · Malicious code in @itsreduxtm/unpkg-xss-test (npm)MAL-2026-13430 · Malicious code in @ch4acko3/frontal-lobe (npm)MAL-2026-13468 · Malicious code in xdaxx (npm)MAL-2026-13470 · Malicious code in ynastore-baileys (npm)MAL-2026-13444 · Malicious code in dpdgroup-css (npm)MAL-2026-13447 · Malicious code in gpt-terminal-cli (npm)MAL-2026-13446 · Malicious code in express-chai (npm)MAL-2026-13433 · Malicious code in @ks-video/kwai-player-web (npm)MAL-2026-13437 · Malicious code in aitable-workflow-server (npm)MAL-2026-13448 · Malicious code in lib-frontsga (npm)MAL-2026-13453 · Malicious code in pilgrimage-portal-client (npm)MAL-2026-13467 · Malicious code in wos-library-ui (npm)MAL-2026-13442 · Malicious code in content-common (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。