OpenSSF Malicious Packages · OSV format
MAL-2026-13401 · Malicious code in helmet-pro (npm)MAL-2026-13393 · Malicious code in wallet-monitor-snap (npm)MAL-2026-10721 · Malicious code in @whalent/agent (npm)MAL-2026-12437 · Malicious code in simplipayng (npm)MAL-2026-12333 · Malicious code in @zahlen/checkout-react (npm)MAL-2026-12332 · Malicious code in @zahlen/checkout-angular (npm)MAL-2026-12330 · Malicious code in @vboxdev/common (npm)MAL-2026-12328 · Malicious code in @rentwise/common (npm)MAL-2026-12324 · Malicious code in @nasdtickets/common (npm)MAL-2026-12323 · Malicious code in @nasddatax/common (npm)MAL-2026-12318 · Malicious code in @hoteldev/common (npm)MAL-2026-13387 · Malicious code in @afasinatickets/common (npm)MAL-2026-11128 · Malicious code in app-soda-layer (npm)MAL-2026-13379 · Malicious code in statist-browser-typed-client-sme.rko.tariffs.web (npm)MAL-2026-12812 · Malicious code in ts-toolkit-plus (npm)MAL-2026-12499 · Malicious code in wallet-analytics (npm)MAL-2026-12493 · Malicious code in utility-kit-ts (npm)MAL-2026-12486 · Malicious code in travel-core-typings-reducers (npm)MAL-2026-12485 · Malicious code in trapp-configuration (npm)MAL-2026-12477 · Malicious code in tcb-web-images (npm)MAL-2026-12476 · Malicious code in tcb-web-header (npm)MAL-2026-12454 · Malicious code in statist-browser-typed-client-social.shorts.editor (npm)MAL-2026-12453 · Malicious code in statist-browser-typed-client-sme.rko.finance.web (npm)MAL-2026-12452 · Malicious code in statist-browser-typed-client-sme.platform.mobile.voip.common.events (npm)MAL-2026-12451 · Malicious code in statist-browser-typed-client-rubliq.platform.keycloak (npm)MAL-2026-12450 · Malicious code in statist-browser-typed-client-risktech.uwfrontantifraud.events (npm)MAL-2026-12447 · Malicious code in statist-browser-typed-client-mb.product.mclaccount (npm)MAL-2026-12446 · Malicious code in statist-browser-typed-client-itsa.digitalinterview.events (npm)MAL-2026-12445 · Malicious code in statist-browser-typed-client-eventea.projects.pfpacquiring (npm)MAL-2026-12444 · Malicious code in statist-browser-typed-client-coretech.web.metrics (npm)数据来源:OpenSSF Malicious Packages。已撤回记录保留用于审计,不应作为当前活跃检测结果。