ossf/malicious-packages

A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.

1 best points · 1 comments · 1 Hacker News post · 642 GitHub stars · View on GitHub

Hacker News discussions

• False Positive OSV Advisories Reported by Amazon Inspector (1 points, 1 comments, by joeyhage, 2026-05-26)