OpenSSF Malicious Packages · OSV format
MAL-2026-13442 · Malicious code in content-common (npm)MAL-2026-13438 · Malicious code in cewe-npm-cops (npm)MAL-2026-13472 · Malicious code in alphalend-abi (PyPI)MAL-2026-13429 · Malicious code in @avi892nash/aegis-grid-runner (npm)MAL-2026-13460 · Malicious code in stretchshop (npm)MAL-2026-13428 · Malicious code in @love-moon/conductor-cli (npm)MAL-2026-13419 · Malicious code in @holocronlab/botruntime-runtime (npm)MAL-2026-13427 · Malicious code in @leejungkiin/awkit (npm)MAL-2026-13474 · Malicious code in @diezyyasha/libsignal-node (npm)MAL-2026-13426 · Malicious code in xayoub-xctxteam (PyPI)MAL-2026-13425 · Malicious code in typst-resume-cli (npm)MAL-2026-10767 · Malicious code in syft-acp-util (npm)MAL-2026-10766 · Malicious code in syft-acp-uikit (npm)MAL-2026-10765 · Malicious code in syft-acp-core (npm)MAL-2026-10764 · Malicious code in syft-acp-atoms (npm)MAL-2026-12402 · Malicious code in new-native-tools-linux-x64-gnu (npm)MAL-2026-13396 · Malicious code in @activepieces/piece-google-forms (npm)MAL-2026-13395 · Malicious code in @activepieces/piece-google-contacts (npm)MAL-2026-13394 · Malicious code in @activepieces/piece-google-bigquery (npm)MAL-2026-13364 · Malicious code in @ikbal_fadilah_vanexa01/vanexa-agent (npm)MAL-2026-13363 · Malicious code in @cliphijack/santaclaude (npm)MAL-2026-13355 · Malicious code in @astralcore/sl-aura (npm)MAL-2026-12320 · Malicious code in @lizhao1/memorax-code-internal (npm)MAL-2026-12313 · Malicious code in @ccfly/setup-darwin-x64 (npm)MAL-2026-12084 · Malicious code in @ccfly/setup-darwin-arm64 (npm)MAL-2026-10707 · Malicious code in @ai-support-agent/cli (npm)MAL-2026-10705 · Malicious code in @agent-link/agent (npm)MAL-2026-13418 · Malicious code in @ccfly/setup-linux-x64 (npm)MAL-2026-13416 · Malicious code in @bananacool467/ui-tools (npm)MAL-2026-13415 · Malicious code in @aubea/mars (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。