OpenSSF Malicious Packages · OSV format
MAL-2026-14401 · Malicious code in multyproccess (PyPI)MAL-2026-14440 · Malicious code in web-advertising (npm)MAL-2026-4818 · Malicious code in saturn-bail (npm)MAL-2026-14418 · Malicious code in dotish (npm)MAL-2026-14411 · Malicious code in dpg-media-7ehemel (npm)MAL-2026-6497 · Malicious code in chai-as-synced (npm)MAL-2026-14416 · Malicious code in dims-hydration-ui (npm)MAL-2026-14425 · Malicious code in auth-otp (npm)MAL-2026-14410 · Malicious code in @temptation.js/utils (npm)MAL-2026-14404 · Malicious code in @blurrydespair/libsignal-node (npm)MAL-2026-14423 · Malicious code in @medisend/shared (npm)MAL-2026-14427 · Malicious code in chai-as-mno (npm)MAL-2026-14421 · Malicious code in @medisend/auth (npm)MAL-2026-14422 · Malicious code in @medisend/core (npm)MAL-2026-14432 · Malicious code in kelly-stake-sizing (npm)MAL-2026-14434 · Malicious code in openai-pr-reviewer (npm)MAL-2026-14428 · Malicious code in consumerweb-serverutils (npm)MAL-2026-14426 · Malicious code in babel-polyfill-plugin-corejs2 (npm)MAL-2026-14436 · Malicious code in poly-price-node (npm)MAL-2026-14438 · Malicious code in remove-bg-serverless-azure (npm)MAL-2026-14439 · Malicious code in secret-key-totp (npm)MAL-2026-14435 · Malicious code in paypal-business-sdk (npm)MAL-2026-14433 · Malicious code in manticore-log (npm)MAL-2026-14437 · Malicious code in ppb-manticore (npm)MAL-2026-14420 · Malicious code in @gsas/gsas-sdk (npm)MAL-2026-5574 · Malicious code in spotify-url-resolver (npm)MAL-2026-14400 · Malicious code in sm-session (npm)MAL-2026-14399 · Malicious code in sm-payment (npm)MAL-2026-14398 · Malicious code in sm-oauth (npm)MAL-2026-14397 · Malicious code in sm-checkout (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。