-
Notifications
You must be signed in to change notification settings - Fork 138
Pull requests: ossf/malicious-packages
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Add malicious package report for logs-update (crates.io)
#1513
opened Sep 11, 2026 by
KunalSin9h
Contributor
Loading…
Add OSV reports: cat-sis2go-utils install beacon, plogme crysnovax Baileys fork (2 packages)
#1508
opened Sep 8, 2026 by
johncassil
Contributor
Loading…
fix(npm/deployowl): update MAL-2026-10677 to reflect fix in v2.3.0+
#1504
opened Sep 7, 2026 by
emika389
Loading…
Move database specific parsing to a protobuf
#1466
opened Aug 24, 2026 by
calebbrown
Contributor
Loading…
report: npm/@whalent/agent 0.3.303-0.3.358 (obfuscated credential-stealing RAT)
#1462
opened Aug 22, 2026 by
rbnfrhnr
Contributor
Loading…
report: npm/totp-utils 1.4.4 (Discord/Minecraft credential stealer)
#1461
opened Aug 21, 2026 by
rbnfrhnr
Contributor
Loading…
Add OSV reports: AI-agent CLI C2 npm campaign (3 packages)
#1450
opened Aug 16, 2026 by
johncassil
Contributor
Loading…
fix: recursively merge and deduplicate database_specific maps and arrays
#1317
opened Jun 17, 2026 by
jeffrey-theog06
Loading…
fix: scope @browserbasehq/* advisories to only compromised versions
#1139
opened Feb 21, 2026 by
shrey150
Loading…
ProTip!
Type g p on any issue or pull request to go back to the pull request listing page.