OpenSSF Malicious Packages · OSV format
MAL-2026-12443 · Malicious code in statist-browser-typed-client-automlplatform.nlppl.searchy (npm)MAL-2026-12442 · Malicious code in sso-tramvai-lib-roles (npm)MAL-2026-12311 · Malicious code in streak-calc-metrics (npm)MAL-2026-12308 · Malicious code in vvvedernikov-test-another-test (npm)MAL-2026-12305 · Malicious code in twork-products-taiga2-products-investment (npm)MAL-2026-12301 · Malicious code in twork-data-services-sme-agent-company-relation (npm)MAL-2026-12297 · Malicious code in twork-data-services-proxy-b2b-crm-api-v1-partners-companies-info (npm)MAL-2026-12296 · Malicious code in twork-data-services-product-design-data (npm)MAL-2026-12286 · Malicious code in trapp-check-logs (npm)MAL-2026-12285 · Malicious code in tramvai-module-feature-toggle (npm)MAL-2026-12284 · Malicious code in tinkoff-volna-zustate (npm)MAL-2026-12282 · Malicious code in tinkoff-test-app-child-app (npm)MAL-2026-12279 · Malicious code in tinkoff-statist-web-typed-client-test.golden.retriever (npm)MAL-2026-12277 · Malicious code in tinkoff-statist-browser-typed-client-sme.users.origination.web (npm)MAL-2026-12275 · Malicious code in tinkoff-statist-browser-typed-client-sme.rko.origsmartphonepaytb.common.mobile.events (npm)MAL-2026-12265 · Malicious code in tinkoff-statist-browser-typed-client-jumptaxi.feature.contacts (npm)MAL-2026-12264 · Malicious code in tinkoff-statist-browser-typed-client-itsa.corporatemessenger.clientv1.web.events (npm)MAL-2026-12263 · Malicious code in tinkoff-statist-browser-typed-client-itsa.candy.selfservicesupport.frontend.events (npm)MAL-2026-12259 · Malicious code in tinkoff-statist-browser-typed-client-eventea.projects.finhealthwebmicroblocks (npm)MAL-2026-12256 · Malicious code in tinkoff-statist-browser-typed-client-coretech.statist.mobile.ci (npm)MAL-2026-12255 · Malicious code in tinkoff-statist-browser-typed-client-cardsmobile.events.promotest (npm)MAL-2026-12251 · Malicious code in tinkoff-pfpa-tools (npm)MAL-2026-12248 · Malicious code in tinkoff-pfp-block-mobile-advert-footer (npm)MAL-2026-12247 · Malicious code in tinkoff-pfp-block-desktop-tabs (npm)MAL-2026-12245 · Malicious code in tinkoff-pfp-atom-desktop-carousel (npm)MAL-2026-12241 · Malicious code in tinkoff-fb-fieldset-car-reference-kasko (npm)MAL-2026-12240 · Malicious code in tinkoff-fb-app-frame-page-height-dippy (npm)MAL-2026-12238 · Malicious code in tinkoff-component-limits (npm)MAL-2026-12236 · Malicious code in tinkoff-codeceptjs-storyshots (npm)MAL-2026-12232 · Malicious code in tinkoff-boxy-gitlab-labels (npm)数据来源：OpenSSF Malicious Packages。已撤回记录保留用于审计，不应作为当前活跃检测结果。